Unrated severityNVD Advisory· Published Mar 12, 2026· Updated Mar 12, 2026
Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
CVE-2026-28254
Description
A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information through unprotected APIs.
Affected products
2- Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.cisa.gov/news-events/ics-advisories/icsa-26-071-01mitregovernment-resource
News mentions
0No linked articles in our index yet.