CVE-2019-5748: Traccar Server

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks.

Affected products

• Traccar Server: version 4.2 only

Published 2019-01-09. Last modified 2026-06-17.