Trane

Products

ProductCVEsExploitedLatest
Tracer SC7–Mar 12, 2026
Tracer Concierge6–Mar 12, 2026
Tracer SC+6–Mar 12, 2026
Symbio1–Nov 22, 2021

Exploited and recent CVEs

  • CVE-2026-28256 Medium 6.9 Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.3%
  • CVE-2026-28256 Medium 6.9 Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.3%
  • CVE-2026-28256 Medium 6.9 Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.3%
  • CVE-2026-28255 High 8.2 Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.3%
  • CVE-2026-28255 High 8.2 Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.3%
  • CVE-2026-28255 High 8.2 Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.3%
  • CVE-2026-28254 Medium 6.9 Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.3%
  • CVE-2026-28254 Medium 6.9 Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.3%
  • CVE-2026-28254 Medium 6.9 Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.3%
  • CVE-2026-28253 High 8.7 Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.3%
  • CVE-2026-28253 High 8.7 Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.3%
  • CVE-2026-28253 High 8.7 Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.3%
  • CVE-2026-28252 Critical 9.2 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.2%
  • CVE-2026-28252 Critical 9.2 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.2%
  • CVE-2026-28252 Critical 9.2 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 0.2%
  • CVE-2021-38448 High 7.5 Trane Symbio Improper Control of Generation of Code 0.3%
  • CVE-2021-38450 Critical 9.9 Trane Tracer Code Injection 1.0%
  • CVE-2021-38450 Critical 9.9 Trane Tracer Code Injection 1.0%
  • CVE-2021-38450 Critical 9.9 Trane Tracer Code Injection 1.0%
  • CVE-2021-42534 Medium 6.3 Trane Building Automation Controllers Cross-site Scripting 0.6%