Traccar Vulnerabilities

Comprehensive security vulnerability database for Traccar products

Last updated: Feb 23, 2026
Total CVEs

1

Critical

0

With Exploits

0

Last 30 Days

0

Severity Distribution

Critical0
0%
High0
0%
Medium1
100%
Low0
0%
DescriptionVendor / ProductExploit Status
CVE-2025-689306.5

An attacker can exploit a vulnerability in the Traccar GPS tracking system to take control of a legitimate user's WebSocket connection, allowing them to send and receive data as if they were that user. This requires the attacker to trick the system into thinking their request is coming from a trusted source, which could happen if the user visits a malicious website while logged into Traccar.

traccartraccar
Theoretical
about 1 month agoFeb 23, 2026

About Traccar Security

This page tracks all publicly disclosed security vulnerabilities (CVEs) affecting Traccar products. Our database is updated in real-time from the National Vulnerability Database (NVD) and enriched with exploit information from GitHub and other security research sources.

Each CVE listing includes CVSS severity scores, exploit availability status, AI-powered vulnerability summaries, and links to official patches and security advisories.