Trane Tracer SC, Tracer SC+, and Tracer Concierge

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, execute arbitrary commands, or perform a denial-of-service on the product.

CVEs (5)

Remediations

• Trane has released the following versions of Tracer SC+ for users to upgrade to:
• CVE-2026-28252, CVE-2026-28253, CVE-2026-28254: Tracer SC+ version v6.30.2313
• CVE-2026-28255: Trane has implemented enhanced cloud security controls to mitigate this vulnerability.
• CVE-2026-28256: Trane has implemented enhanced security controls which have been communicated to their customers. For more information, contact Trane.

Affected Vendors

Affected Products (3)

Affected Sectors

Critical Manufacturing