本ページは trane tracer_concierge に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2026-28256 | A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts. | [email protected] | 6.9 | 0.27% | 2026-03-12 | 2026-06-17 |
| CVE-2026-28255 | A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts. | [email protected] | 8.2 | 0.29% | 2026-03-12 | 2026-06-17 |
| CVE-2026-28254 | A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information through unprotected APIs. | [email protected] | 6.9 | 0.27% | 2026-03-12 | 2026-06-17 |
| CVE-2026-28253 | A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to cause a denial-of-service condition | [email protected] | 8.7 | 0.31% | 2026-03-12 | 2026-06-17 |
| CVE-2026-28252 | A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device. | [email protected] | 9.2 | 0.22% | 2026-03-12 | 2026-06-17 |
| CVE-2021-38450 | The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software. | [email protected] | 9.9 | 0.98% | 2021-10-26 | 2026-06-17 |