← Database

CVE-2026-28254

HIGH CVSS: 7.5 Published: 2026-03-12 Modified: 2026-06-17

Description

A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information through unprotected APIs.

Affected Platforms

Trane Tracer Sc\+Trane Tracer Sc\+ FirmwareTrane Tracer ConciergeTrane Tracer ScTrane Tracer Sc Firmware

Weakness Type

CWE-862

References