Browse CVEs

MEDIUM 5.4 CVE-2026-27693 Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.0, the KML and GPX export functionality… Traccar 6.13.0+ Fix from $1,6002026-05-05 MEDIUM 5.4 CVE-2026-27694 Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.0, the email notification templates ins… Traccar 6.13.0+ Fix from $1,6002026-05-05 MEDIUM 6.5 CVE-2026-27644 Traccar is an open source GPS tracking system. In versions between 6.11.1 and 6.13.0, the CSV export functionality writes position data, including us… Traccar 6.13.0+ Fix from $1,6002026-05-05 HIGH 8.7 CVE-2026-25649 Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticated users can steal OAuth 2.0 … Traccar after 6.11.1 Fix from $1,9502026-02-23 HIGH 8.7 CVE-2026-25648 Versions of the Traccar open-source GPS tracking system starting with 6.11.1 contain an issue in which authenticated users can execute arbitrary Java… Traccar No fix yet Fix from $1,9502026-02-23 MEDIUM 6.5 CVE-2026-23521 Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticated users who can create or ed… Traccar after 6.11.1 Fix from $1,6002026-02-23 MEDIUM 6.5 CVE-2025-68930 Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability in … Traccar after 6.11.1 Fix from $1,6002026-02-23 CRITICAL 9.8 CVE-2024-7746 Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue a… Traccar after 6.0 Fix from $2,3002024-08-13 CRITICAL 9.6 CVE-2024-31214EPSS 18% Traccar is an open source GPS tracking system. Traccar versions 5.1 through 5.12 allow arbitrary files to be uploaded through the device image upload… Traccar after 5.12 Fix from $2,3002024-04-10 CRITICAL 9.8 CVE-2023-50729 Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnerability in File feature allows… Traccar 5.11+ Fix from $2,3002024-01-15 MEDIUM 6.3 CVE-2021-21292 Traccar is an open source GPS tracking system. In Traccar before version 4.12 there is an unquoted Windows binary path vulnerability. Only Windows ve… Traccar 4.12+ Fix from $1,6002021-02-02 MEDIUM 6.5 CVE-2020-5246 Traccar GPS Tracking System before version 4.9 has a LDAP injection vulnerability. It occurs when user input is being used in LDAP search filter. By … Traccar 4.9+ Fix from $1,6002020-07-14 CRITICAL 9.8 CVE-2019-5748 In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks. Server Patch available Fix from $2,3002019-01-09 CRITICAL 9.8 CVE-2018-1000881 Traccar Traccar Server version 4.0 and earlier contains a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in Computed… Server after 4.0 Fix from $2,3002018-12-20