Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-28252

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Trane
Products
Tracer Concierge Tracer Sc Tracer Sc\+ and 2 more
CVE-2026-28253

Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to cause a denial-of-service condition

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Trane
Products
Tracer Concierge Tracer Sc Tracer Sc\+ and 2 more
CVE-2026-28254

Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information through unprotected APIs.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Trane
Products
Tracer Concierge Tracer Sc Tracer Sc\+ and 2 more
CVE-2026-28255

Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Trane
Products
Tracer Concierge Tracer Sc Tracer Sc\+ and 2 more
CVE-2026-28256

Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Trane
Products
Tracer Concierge Tracer Sc Tracer Sc\+ and 2 more
CVE-2021-38450

Trane Tracer Code Injection

The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software.

CVSS 3.1 · 9.9 Critical EPSS 1.0% KEV · Not listed
Vendors
Trane
Products
Tracer Concierge Tracer Sc Tracer Sc\+ and 2 more