Read the docs

traccar

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

traccar records in CISA KEV

No traccar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Traccar 13 records HIGH Server 2 records MEDIUM

Records

13 records in Traccar · all components

TI-2025-42386 CVE-2025-68930

Traccar Missing Origin Validation in WebSockets

Priority MEDIUM 64

Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability in the `/api/socket` endpoint.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00556 Published 2026-02-23 No fix listed CWE-1385
TI-2026-18945 CVE-2026-23521

Traccar vulnerable to Path Traversal and External Control of File Name or Path

Priority MEDIUM 62

Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticated users who can create or edit devices can set a device `uniqueId` to an absolute path.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00371 Published 2026-02-23 No fix listed CWE-22
TI-2024-07181 CVE-2024-7746 · GHSA-w4h5-9mg2-vv6r

Use of default credentials at Traccar fleet management solution

Priority MEDIUM 44

Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue affects the privileged transactions implemented by the Traccar solution…

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00533 Published 2024-08-13 Fixed CWE-1392
Open these records in search →