critical9.8
CVE-2026-28256
A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensiti…
Impact
A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trane | Tracer Sc\+ Firmware | before 6.3.2310 |
| Trane | Tracer Sc Firmware | through 4.4 Version 4.4 |
| Trane | Tracer Concierge | before 6.3.2310 |