CVE-2026-28252
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication…
Published Mar 12, 2026 · updated Jun 17, 2026 · trane tracer sc firmware
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 12, 2026 · NIST NVD
Detected
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.
Jun 17, 2026 · NIST NVD
Updated
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.
Affected
- cpe trane/tracer conciergeversion unspecified
- cpe trane/tracer sc firmwareversion unspecified
- cpe trane/tracer sc firmware4.4
- cpe trane/tracer sc+ firmwareversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-28252
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-28252
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.
nvd.nist.gov