CVE-2026-126777 | Traccar up to 6.16.x LdapProvider /api/session LdapProvider.login improper authentication

November 11, 2026 Yanac

A vulnerability, which was classified as critical, was found in Traccar up to 6.16.x. Affected is the function LdapProvider.login of the file /api/session of the component LdapProvider. Such manipulation leads to improper authentication.

This vulnerability is uniquely identified as CVE-2026-126777. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More