CVE-2026-28256
Critical · 9.8CVSS
9.8
EPSS
0.5%
Published
Mar 12, 2026
CISA due date
—
The record
A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|