CVE-2026-28254 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive informati…
Medium CVSS: 6.9

CVE-2026-28254

A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information through unprotected APIs.
Vendor
Trane
Product
Tracer Sc Firmware
CWE
CWE-862
Yayın Tarihi
2026-03-12 18:16:23
Güncelleme
2026-03-27 16:24:39
Source Identifier
ics-cert@hq.dhs.gov
KEV Date Added
-

Kategoriler

CWE-862 Tracer Sc Firmware MEDIUM Trane 2026

Referanslar

https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-01