theinfosecnews
theinfosecnews
Subscribe to Daily Digest

CVE-2026-40185

Published April 11, 2026 · Updated April 11, 2026

7.1CVSS
high

What This Means

CVE-2026-40185 is a high-severity vulnerability in TREK, a collaborative travel planner, that lacks proper authorization checks for its Immich trip photo management routes prior to version 2.7.2. This flaw allows unauthorized users to access and manage sensitive trip photo data. Upgrade to TREK version 2.7.2 or later to mitigate this vulnerability and secure your application.

Official Description+

TREK is a collaborative travel planner. Prior to 2.7.2, TREK was missing authorization checks on the Immich trip photo management routes. This vulnerability is fixed in 2.7.2.

Recommended Actions

  1. Check if your systems use any of the affected products listed above.
  2. Apply vendor patches immediately if available.
  3. Monitor vendor advisories for updates and additional mitigations.
  4. Review logs for indicators of compromise related to CVE-2026-40185.

Related Coverage