VYPR
← All advisories
High severity7.5NVD Advisory· Published Mar 12, 2026· Updated Jun 17, 2026

CVE-2026-28253

CVE-2026-28253

Description

A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to cause a denial-of-service condition

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Track\+/Tracer Concierge2 versions
    cpe:2.3:a:trane:tracer_concierge:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:trane:tracer_concierge:*:*:*:*:*:*:*:*range: <6.3.2310
    • (no CPE)
  • Track\+/Tracer Sc\+ Firmware8 versions
    cpe:2.3:o:trane:tracer_sc\+_firmware:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:trane:tracer_sc\+_firmware:*:*:*:*:*:*:*:*range: <6.3.2310
    • cpe:2.3:o:trane:tracer_sc_firmware:*:*:*:*:*:*:*:*range: <=4.4
    • cpe:2.3:o:trane:tracer_sc_firmware:4.4:service_pack1:*:*:*:*:*:*
    • cpe:2.3:o:trane:tracer_sc_firmware:4.4:service_pack2:*:*:*:*:*:*
    • cpe:2.3:o:trane:tracer_sc_firmware:4.4:service_pack3:*:*:*:*:*:*
    • cpe:2.3:o:trane:tracer_sc_firmware:4.4:service_pack4:*:*:*:*:*:*
    • cpe:2.3:o:trane:tracer_sc_firmware:4.4:service_pack5:*:*:*:*:*:*
    • cpe:2.3:o:trane:tracer_sc_firmware:4.4:service_pack6:*:*:*:*:*:*
  • Trane/Tracer Sc+llm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 0
  • Track\+/Tracer Scv5
    Range: 0

Patches

Vulnerability mechanics

References

1

News mentions

1