CVE-2026-28254

Name of the Vulnerable Software and Affected Versions Trane Tracer SC Trane Tracer SC+ Trane Tracer Concierge

Description A missing authorization flaw exists in Trane Tracer SC, Tracer SC+, and Tracer Concierge. This issue could allow an unauthenticated attacker to gain access to sensitive information through unprotected APIs. The affected API endpoints lack proper authorization checks, potentially exposing data to unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.