CVE-2026-40184
TREK is a collaborative travel planner.
Published Apr 10, 2026 · updated Jun 17, 2026 · mauriceboe trek
TREK is a collaborative travel planner. Prior to 2.7.2, TREK served uploaded photos without requiring authentication. This vulnerability is fixed in 2.7.2.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Apr 10, 2026 · NIST NVD
Detected
TREK is a collaborative travel planner. Prior to 2.7.2, TREK served uploaded photos without requiring authentication. This vulnerability is fixed in 2.7.2.
Jun 17, 2026 · NIST NVD
Updated
TREK is a collaborative travel planner. Prior to 2.7.2, TREK served uploaded photos without requiring authentication. This vulnerability is fixed in 2.7.2.
Affected
- cpe mauriceboe/trekversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-40184
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-40184
TREK is a collaborative travel planner. Prior to 2.7.2, TREK served uploaded photos without requiring authentication. This vulnerability is fixed in 2.7.2.
nvd.nist.gov