Skip to content
OpenAdvisories

Vendor

traccar

22 known vulnerabilities.

Products

traccar 20 traccar-client 1 Server 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2025-68930 Public exploit

    Traccar Missing Origin Validation in WebSockets

    Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability in the `/api/socket` endpoint. The application fails to validate the `Origin` header during the WebSocket handsha…

    traccar traccar
  • High 8.5
    CVE-2024-24809 Public exploit EPSS 54%

    Traccar vulnerable to Path Traversal: 'dir/../../filename' and Unrestricted Upload of File with Dangerous Type

    Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows registration by default, attackers can acquire ordinary user permissions by regi…

    traccar traccar