CVE-2026-23521 | Traccar up to 6.11.1 Device Image uniqueId path traversal (GHSA-rc28-cvfc-chqr)

A vulnerability described as critical has been identified in Traccar up to 6.11.1. Affected by this issue is some unknown functionality of the component Device Image Handler. The manipulation of the argument uniqueId results in path traversal.

This vulnerability is identified as CVE-2026-23521. The attack can be executed remotely. There is not any exploit available.