← Database

CVE-2026-28256

CRITICAL CVSS: 9.8 Published: 2026-03-12 Modified: 2026-06-17

Description

A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.

Affected Platforms

Trane Tracer Sc\+Trane Tracer Sc\+ FirmwareTrane Tracer ConciergeTrane Tracer ScTrane Tracer Sc Firmware

Weakness Type

CWE-547

References