← Database

CVE-2026-28252

CRITICAL CVSS: 9.8 Published: 2026-03-12 Modified: 2026-06-17

Description

A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.

Affected Platforms

Trane Tracer Sc\+Trane Tracer Sc\+ FirmwareTrane Tracer ConciergeTrane Tracer ScTrane Tracer Sc Firmware

Weakness Type

CWE-327

References