Advisories · Technology

Trane Tracer SC.

Every CVE that names Trane Tracer SC among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-28256 CVE record

CVSS 6.9 Medium

Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
- Trane Tracer SC
- Trane Tracer Concierge
- CWE-547
Not analysed yet 12 Mar 2026
CVE-2026-28255 CVE record

CVSS 8.2 High

Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
- Trane Tracer SC
- Trane Tracer Concierge
- Hard-coded credentials
Not analysed yet 12 Mar 2026
CVE-2026-28254 CVE record

CVSS 6.9 Medium

Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
- Trane Tracer SC
- Trane Tracer Concierge
- Broken access control
Not analysed yet 12 Mar 2026
CVE-2026-28253 CVE record

CVSS 8.7 High

Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
- Trane Tracer SC
- Trane Tracer Concierge
- Denial of service
Not analysed yet 12 Mar 2026
CVE-2026-28252 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
- Trane Tracer SC
- Trane Tracer Concierge
- Weak cryptography or TLS
Not analysed yet 12 Mar 2026
CVE-2021-38450 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Trane Tracer Code Injection
- Trane Tracer SC
- Trane Tracer Concierge
- Code injection
Not analysed yet 27 Oct 2021
CVE-2021-42534 CVE record

CVSS 6.3 Medium

Trane Building Automation Controllers Cross-site Scripting
- Trane Tracer SC
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2021