CVE-2026-121545 | robiningelbrecht Dreeve prior 5.8.0 Webhook Request handleEvent missing authentication

A vulnerability labeled as critical has been found in robiningelbrecht Dreeve. Affected by this issue is the function StravaWebhookRequestHandler::handleEvent of the component Webhook Request Handler. The manipulation results in missing authentication.

This vulnerability was named CVE-2026-121545. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More