← Database

CVE-2026-40184

LOW CVSS: 3.7 Published: 2026-04-10 Modified: 2026-06-17

Description

TREK is a collaborative travel planner. Prior to 2.7.2, TREK served uploaded photos without requiring authentication. This vulnerability is fixed in 2.7.2.

Affected Platforms

Mauriceboe Trek

Weakness Type

CWE-306

References