Sploitus

12 exploited vulnerabilities in Traccar

Vulnerabilities with publicly known exploits

Vendors
Traccar
With known exploits
12
Affected Traccar versions
≤ 5.12, 6.11.1

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2024-31214 4 exploits
CVSS 10.0 CRITICAL 2024-04-10FIX AVAILABLE
Exploit for SQL Injection in Valvepress AutomaticTraccar v5 Remote Code Execution (CVE-2024-31214 and CVE-2024-24809)
CVE-2026-25649
CVSS 8.7 HIGH 2026-02-23
CVE-2026-25648
CVSS 8.7 HIGH 2026-02-23
CVE-2025-61666
CVSS 8.7 HIGH 2025-10-02FIX AVAILABLE
CVE-2024-24809 9 exploits
CVSS 8.5 HIGH 2024-04-10FIX AVAILABLE
📄 Palo Alto Networks PAN-OS 11.2 PHP Code InjectionPalo Alto Expedition 1.2.91 Remote Code Execution Exploit
CVE-2023-50729
CVSS 8.4 HIGH 2024-01-15FIX AVAILABLE
CVE-2025-68930 3 exploits
CVSS 7.1 HIGH 2026-02-23
📄 Traccar GPS Tracking System 6.11.1 Cross-Site WebSocket HijackingTraccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking (CSWSH)
CVE-2026-27644
CVSS 6.5 MEDIUM 2026-05-05FIX AVAILABLE
CVE-2026-23521
CVSS 6.5 MEDIUM 2026-02-23
CVE-2026-27694
CVSS 5.4 MEDIUM 2026-05-05FIX AVAILABLE
CVE-2026-27693
CVSS 5.4 MEDIUM 2026-05-05FIX AVAILABLE
CVE-2026-44314
CVSS 5.3 MEDIUM 2026-05-26FIX AVAILABLE