ZeroDay Findings
Sign inSign up

Findings

CVE-2026-28253

A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to cause a den…

Published Mar 12, 2026 · updated Jun 17, 2026 · trane tracer sc firmware

A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to cause a denial-of-service condition

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 12, 2026 · NIST NVD

    Detected

    A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to cause a denial-of-service condition

  2. Jun 17, 2026 · NIST NVD

    Updated

    A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to cause a denial-of-service condition

Affected

  • cpe trane/tracer conciergeversion unspecified
  • cpe trane/tracer sc firmwareversion unspecified
  • cpe trane/tracer sc firmware4.4
  • cpe trane/tracer sc+ firmwareversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-28253

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-28253

    A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to cause a denial-of-service condition

    nvd.nist.gov

References