traccar

3 results · Clear filters · Feed

• High 7.1
  CVE-2025-68930 Public exploit

  Traccar Missing Origin Validation in WebSockets

  Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability in the `/api/socket` endpoint. The application fails to validate the `Origin` header during the WebSocket handsha…

  traccar traccar
  Feb 23, 2026
• Critical 9.7
  CVE-2024-31214 Public exploit EPSS 18%

  Traccar's unrestricted file upload vulnerability in device image upload could lead to remote code execution

  Traccar is an open source GPS tracking system. Traccar versions 5.1 through 5.12 allow arbitrary files to be uploaded through the device image upload API. Attackers have full control over the file contents, full control over the directory where the file is st…

  traccar traccar
  Apr 10, 2024
• High 8.5
  CVE-2024-24809 Public exploit EPSS 54%

  Traccar vulnerable to Path Traversal: 'dir/../../filename' and Unrestricted Upload of File with Dangerous Type

  Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows registration by default, attackers can acquire ordinary user permissions by regi…

  traccar traccar
  Apr 10, 2024