CVE-2026-28256 | Trane Tracer SC/Tracer SC+/Tracer Concierge hard-coded, security-relevant constants (icsa-26-071-01)

A vulnerability was found in Trane Tracer SC, Tracer SC+ and Tracer Concierge. It has been rated as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to use of hard-coded, security-relevant constants.

This vulnerability is referenced as CVE-2026-28256. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.