Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 5 products
CVE-2026-28252 A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication… https://www.cve.org/CVERecord?id=CVE-2026-28252
Post summary
A newly identified vulnerability (CVE-2026-28252) involving a broken cryptographic algorithm in Trane devices could allow attackers to bypass authentication.
🚨 CVE-2026-28252: Use of a Brok... Weak crypto in HVAC controllers = direct path to root access across entire building automation networks. #HVAC #CriticalInfra #WeakCrypto. https://zerodaysignal.com/vulnerability/CVE-2026-28252 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet announces CVE‑2026‑28252, noting weak encryption in HVAC controllers that allows root access across building automation networks, and directs readers to a link for more details.
11 of 11 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | trane | tracer_concierge | - | - | - |
| HW | trane | tracer_sc | - | - | - |
| HW | trane | tracer_sc\+ | - | - | - |
| OS | trane | tracer_sc\+_firmware | - | - | - |
| OS | trane | tracer_sc_firmware | - | - | - |
| OS | trane | tracer_sc_firmware | 4.4 | - | - |
| OS | trane | tracer_sc_firmware | 4.4 | - | - |
| OS | trane | tracer_sc_firmware | 4.4 | - | - |
| OS | trane | tracer_sc_firmware | 4.4 | - | - |
| OS | trane | tracer_sc_firmware | 4.4 | - | - |
| OS | trane | tracer_sc_firmware | 4.4 | - | - |