What’s Vulnerable › Products

liketrek TREK vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your liketrek TREK version is affected

Latest liketrek TREK vulnerabilities

• CVE-2026-85738 — TREK: SSRF Guard Bypass via IPv6 Transition Addresses (NAT64/6to4) (CVSS 6.3)
• CVE-2026-78887 — liketrek TREK Journey Photo Proxy validateShareTokenForAsset authorization (CVSS 3.7)
• CVE-2026-78886 — liketrek TREK Public Journey Photo Proxy journey-public.controller.ts path traversal (CVSS 3.7)
• CVE-2026-78885 — liketrek TREK OIDC Service oidcService.ts findOrCreateUser improper authentication (CVSS 5.6)
• CVE-2026-78864 — liketrek TREK Journey Entry Update journey.controller.t journeyService.updateEntry sql injection (CVSS 6.3)
• CVE-2026-78863 — liketrek TREK Pre-2FA mfa_token authService.ts loginUser improper authentication (CVSS 6.3)