T
Vendor security profile
traccar
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit2
Patch rate%0
Avg. CVSS5.6
12-month vulnerability rate
0
0
0
0
0
0
1
0
0
0
2
2
CVE KEV
CVE severity distribution
5toplam CVE
High2 (40%)
Medium2 (40%)
Low1 (20%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%40
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
2.3
CVE-2026-108738
Traccar 5.7 through 6.16.0 Login CSRF via OpenID Connect Callback
T
Patch status unknown
7.6
CVE-2026-108737
Traccar through 6.16.0 Weak Password Recovery via TokenManager Token Purpose Confusion
T
Patch status unknown
6.5
CVE-2026-52852
Traccar: Uncontrolled Infinite Loop DoS via Group Parent Cycle
T
Patch status unknownEPSS %1
7.1
CVE-2026-52851
Traccar: Authenticated Blind SQL Injection in DELETE /api/permissions
T
Patch status unknownEPSS %0
4.3
CVE-2026-44314
Incorrect authorization in Traccar
T
Patch status unknownEPSS %0