Traccar
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 21 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 20, 2018 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Traccar 5.7 through 6.16.0 Login CSRF via OpenID Connect Callback
Traccar through 6.16.0 Weak Password Recovery via TokenManager Token Purpose Confusion
Traccar: Uncontrolled Infinite Loop DoS via Group Parent Cycle
Traccar Client: silent configuration hijack via unverified deep link redirects all GPS telemetry
Traccar: Missing edit authorization on device image upload allows read-only users to write files
traccar allows stored HTML injection in notification emails
traccar allows XML injection in KML and GPX exports
traccar allows CSV formula injection via exported position data
Traccar Vulnerable to Authorization Code Theft via Open Redirect in OIDC Provider Endpoints
Traccar Vulnerable to Stored Cross-Site Scripting (XSS) via Malicious SVG File Upload
Monitor Traccar in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.