CVE-2026-28252 — Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

CVE-2026-28252

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge PUBLISHED

Description (CNA)

A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.

Affected (CNA)

Vendor / product	Versions
Trane / Tracer SC	affected 0 before v4.4 SP7
Trane / Tracer SC+	affected 0 before v6.3.2310
Trane / Tracer Concierge	affected 0 before v6.3.2310

CWE

CWE-327

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.