CVE-2018-1000881

Traccar Traccar Server version 4.0 and earlier contains a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in ComputedAttributesHandler.java that can result in Remote Command Execution. This attack appear to be exploitable via Remote: web application request by a self-registered user. This vulnerability appears to have been fixed in 4.1 and later.

• CWE-94

• https://appcheck-ng.com/advisory-remote-code-execution-traccar-server/Exploit, Third Party Advisory
• https://appcheck-ng.com/advisory-remote-code-execution-traccar-server/Exploit, Third Party Advisory

Published

Dec 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000875Berkeley Open Infrastructure for Network Computing BOINC Ser…9.8
• CVE-2018-1000876binutils version 2.32 and earlier contains a Integer Overflo…7.8
• CVE-2018-1000877libarchive version commit 416694915449219d505531b1096384f323…8.8
• CVE-2018-1000878libarchive version commit 416694915449219d505531b1096384f323…8.8
• CVE-2018-1000879libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5…6.5
• CVE-2018-1000880libarchive version commit 9693801580c0cf7c70e862d305270a16b5…6.5
• CVE-2018-1000882WeBid version up to current version 1.2.2 contains a Directo…
• CVE-2018-1000883Elixir Plug Plug version All contains a Header Injection vul…
• CVE-2018-1000884Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6a…
• CVE-2018-1000885PHKP version including commit 88fd9cfdf14ea4b6ac3e3967feea7b…
• CVE-2018-1000886nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vul…
• CVE-2018-1000887Peel shopping peel-shopping_9_1_0 version contains a Cross S…