Unrated severityNVD Advisory· Published Mar 12, 2026· Updated Mar 12, 2026

Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

CVE-2026-28254

Description

A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information through unprotected APIs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Track\+/Tracer Conciergellm-create
Trane/Tracer Sc+llm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 0
Track\+/Tracer Scv5
Range: 0

Patches

Vulnerability mechanics

References

www.cisa.gov/news-events/ics-advisories/icsa-26-071-01mitregovernment-resource

News mentions

⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More
The Hacker News · Jun 15, 2026

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000