3 CVEs
CVSS 8.2
Trane Tracer SC Security Issues
2026-03-12
CVE-2026-28255
HIGH
A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.
8.2
CVSS
0.0%
EPSS
CVE-2026-28254
MEDIUM
A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information through unprotected APIs.
6.9
CVSS
0.1%
EPSS
CVE-2026-28256
MEDIUM
A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.
6.9
CVSS
0.0%
EPSS