TrackR — Vulnerabilities & Security Advisories 4

TrackR is a device tracking service enabling users to locate lost items via Bluetooth connectivity. Historically, the platform has been susceptible to multiple remote code execution and cross-site scripting vulnerabilities due to improper input validation and insecure API endpoints. Privilege escalation issues have also been identified, allowing unauthorized access to user accounts and location data. The service maintains four CVE records, with vulnerabilities primarily centered on web application security flaws. While no major public security incidents have been documented, the consistent pattern of vulnerabilities suggests ongoing challenges in secure coding practices and input sanitization within their tracking infrastructure.