https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-28256.htmlhttps://patchthecve.com/cve/CVE-2026-28256.htmlWed, 17 Jun 2026 10:28:23 +0000CRITICAL 9.8: A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.https://patchthecve.com/cve/CVE-2026-28255.htmlhttps://patchthecve.com/cve/CVE-2026-28255.htmlWed, 17 Jun 2026 10:28:23 +0000CRITICAL 9.8: A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.https://patchthecve.com/cve/CVE-2026-28254.htmlhttps://patchthecve.com/cve/CVE-2026-28254.htmlWed, 17 Jun 2026 10:28:23 +0000HIGH 7.5: A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information through unprotected APIs.https://patchthecve.com/cve/CVE-2026-28253.htmlhttps://patchthecve.com/cve/CVE-2026-28253.htmlWed, 17 Jun 2026 10:28:22 +0000HIGH 7.5: A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to cause a denial-of-service conditionhttps://patchthecve.com/cve/CVE-2026-28252.htmlhttps://patchthecve.com/cve/CVE-2026-28252.htmlWed, 17 Jun 2026 10:28:22 +0000CRITICAL 9.8: A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.