Skip to content
OpenAdvisories

Vendor

traccar

22 known vulnerabilities.

Products

traccar 20 traccar-client 1 Server 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-48745

    Traccar Client: silent configuration hijack via unverified deep link redirects all GPS telemetry

    Traccar Client is a GPS tracking mobile app for sending location updates to private servers using the open-source Traccar platform. In versions 9.7.19 and below, a single crafted deep link can silently hijack all GPS tracking parameters and redirect telemetry…

    traccar traccar-client
  • Critical 9.5
    CVE-2024-7746

    Use of default credentials at Traccar fleet management solution

    Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue affects the privileged transactions implemented by the Traccar solution that should otherwise be protected by t…

    traccar Server
  • Critical 9.7
    CVE-2024-31214 Public exploit EPSS 18%

    Traccar's unrestricted file upload vulnerability in device image upload could lead to remote code execution

    Traccar is an open source GPS tracking system. Traccar versions 5.1 through 5.12 allow arbitrary files to be uploaded through the device image upload API. Attackers have full control over the file contents, full control over the directory where the file is st…

    traccar traccar