← Database

CVE-2026-40185

HIGH CVSS: 7.1 Published: 2026-04-10 Modified: 2026-06-17

Description

TREK is a collaborative travel planner. Prior to 2.7.2, TREK was missing authorization checks on the Immich trip photo management routes. This vulnerability is fixed in 2.7.2.

Affected Platforms

Mauriceboe Trek

Weakness Type

CWE-862

References