CVE-2026-27693 | Traccar up to 6.12.x GPX File xml injection (GHSA-32pj-vrqc-x656)

A vulnerability was found in Traccar up to 6.12.x. It has been classified as critical. This vulnerability affects unknown code of the component GPX File Handler. This manipulation causes xml injection.

This vulnerability is tracked as CVE-2026-27693. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.