CVE-2026-28256
A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive infor…
Published Mar 12, 2026 · updated Jun 17, 2026 · trane tracer sc+ firmware
A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 12, 2026 · NIST NVD
Detected
A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.
Jun 17, 2026 · NIST NVD
Updated
A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.
Affected
- cpe trane/tracer conciergeversion unspecified
- cpe trane/tracer sc firmwareversion unspecified
- cpe trane/tracer sc firmware4.4
- cpe trane/tracer sc+ firmwareversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-28256
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-28256
A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.
nvd.nist.gov