critical9.8
CVE-2026-28252
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authent…
Impact
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trane | Tracer Sc Firmware | through 4.4 Version 4.4 |
| Trane | Tracer Sc\+ Firmware | before 6.3.2310 |
| Trane | Tracer Concierge | before 6.3.2310 |