Security Advisory
CVE-2026-28254
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information through unprotected APIs.