agentprime: traccarEvery new CVE for traccar.https://agentprime.io/CVE-2026-104203: Traccar: Authentication bypass via path parameters exposes protected device mediahttps://agentprime.io/advisories/CVE-2026-104203/https://agentprime.io/advisories/CVE-2026-104203/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:47:02 GMTCVECVE-2026-108738: Traccar 5.7 through 6.16.0 Login CSRF via OpenID Connect Callbackhttps://agentprime.io/advisories/CVE-2026-108738/https://agentprime.io/advisories/CVE-2026-108738/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 12:19:43 GMTCVECVE-2026-108737: Traccar through 6.16.0 Weak Password Recovery via TokenManager Token Purpose Confusionhttps://agentprime.io/advisories/CVE-2026-108737/https://agentprime.io/advisories/CVE-2026-108737/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 12:19:42 GMTCVECVE-2026-52852: Traccar: Uncontrolled Infinite Loop DoS via Group Parent Cyclehttps://agentprime.io/advisories/CVE-2026-52852/https://agentprime.io/advisories/CVE-2026-52852/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 18:32:07 GMTCVECVE-2026-52851: Traccar: Authenticated Blind SQL Injection in DELETE /api/permissionshttps://agentprime.io/advisories/CVE-2026-52851/https://agentprime.io/advisories/CVE-2026-52851/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 18:30:33 GMTCVECVE-2026-44314: Traccar: Missing edit authorization on device image upload allows read-only users to write fileshttps://agentprime.io/advisories/CVE-2026-44314/https://agentprime.io/advisories/CVE-2026-44314/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:02:15 GMTCVECVE-2026-27694: traccar allows stored HTML injection in notification emailshttps://agentprime.io/advisories/CVE-2026-27694/https://agentprime.io/advisories/CVE-2026-27694/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 12:20:55 GMTCVECVE-2026-27693: traccar allows XML injection in KML and GPX exportshttps://agentprime.io/advisories/CVE-2026-27693/https://agentprime.io/advisories/CVE-2026-27693/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 12:17:07 GMTCVECVE-2026-27644: traccar allows CSV formula injection via exported position datahttps://agentprime.io/advisories/CVE-2026-27644/https://agentprime.io/advisories/CVE-2026-27644/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 12:12:49 GMTCVECVE-2026-25649: Traccar Vulnerable to Authorization Code Theft via Open Redirect in OIDC Provider Endpointshttps://agentprime.io/advisories/CVE-2026-25649/https://agentprime.io/advisories/CVE-2026-25649/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Feb 2026 21:12:06 GMTCVECVE-2026-25648: Traccar Vulnerable to Stored Cross-Site Scripting (XSS) via Malicious SVG File Uploadhttps://agentprime.io/advisories/CVE-2026-25648/https://agentprime.io/advisories/CVE-2026-25648/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Feb 2026 21:01:21 GMTCVECVE-2026-23521: Traccar vulnerable to Path Traversal and External Control of File Name or Pathhttps://agentprime.io/advisories/CVE-2026-23521/https://agentprime.io/advisories/CVE-2026-23521/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Feb 2026 20:57:31 GMTCVECVE-2025-68930: Traccar Missing Origin Validation in WebSocketshttps://agentprime.io/advisories/CVE-2025-68930/https://agentprime.io/advisories/CVE-2025-68930/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Feb 2026 20:44:29 GMTCVECVE-2025-61666: Traccar Unauthenticated Local File Inclusion on Windows - Leakage of Traccar Config Filehttps://agentprime.io/advisories/CVE-2025-61666/https://agentprime.io/advisories/CVE-2025-61666/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Oct 2025 21:15:47 GMTCVECVE-2024-31214: Traccar's unrestricted file upload vulnerability in device image upload could lead to remote code executionhttps://agentprime.io/advisories/CVE-2024-31214/https://agentprime.io/advisories/CVE-2024-31214/CVSS 9.7 (Critical). Critical: CVSS score 9.7: 9.0 or more. CVSS score 9.7 (7.0 or more) and EPSS 0.18 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Apr 2024 17:20:55 GMTCVEcriticalCVE-2024-24809: Traccar vulnerable to Path Traversal: 'dir/../../filename' and Unrestricted Upload of File with Dangerous Typehttps://agentprime.io/advisories/CVE-2024-24809/https://agentprime.io/advisories/CVE-2024-24809/CVSS 8.5 (High). Critical: CVSS score 8.5 (7.0 or more) and EPSS 0.54 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Apr 2024 14:48:13 GMTCVEcriticalCVE-2023-50729: An unrestricted file upload vulnerability in traccar leads to RCEhttps://agentprime.io/advisories/CVE-2023-50729/https://agentprime.io/advisories/CVE-2023-50729/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jan 2024 15:57:27 GMTCVECVE-2021-21292: Unquoted Windows binary path in Traccarhttps://agentprime.io/advisories/CVE-2021-21292/https://agentprime.io/advisories/CVE-2021-21292/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Feb 2021 19:35:16 GMTCVECVE-2020-5246: LDAP injection vulnerability in Traccar GPS Tracking Systemhttps://agentprime.io/advisories/CVE-2020-5246/https://agentprime.io/advisories/CVE-2020-5246/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2020 20:42:10 GMTCVE