Skip to content
OpenAdvisories

Vendor

Trane

10 known vulnerabilities.

Products

Tracer SC 7 Tracer Concierge 6 ComfortLink II SCC firmware 2 Symbio 1 Technologies XL824 Thermostat 0 Technologies XL850 Thermostat 0 Technologies XL1050 Thermostat 0 Technologies Pivot Thermostat 0 Odyssey Split Systems 0 Ascend Air-Cooled Chiller Model ACR 0 Agility Water-Cooled Chiller Model HDWA 0 IntelliPak Rooftop Air Conditioner 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-28256

    Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

    A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.

    Trane Tracer SC Tracer Concierge
  • Medium 6.9
    CVE-2026-28254

    Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

    A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information through unprotected APIs.

    Trane Tracer SC Tracer Concierge
  • Medium 6.3
    CVE-2021-42534

    Trane Building Automation Controllers Cross-site Scripting

    The affected product’s web application does not properly neutralize the input during webpage generation, which could allow an attacker to inject code in the input forms.

    Trane Tracer SC