Grilled Cheese

ExploreLog inSign up
Terms of UsePrivacy PolicyCommunity StandardsHelpGet the app

Grilled Cheese is a product of Village Compute

Version devBuilt at: 2026-10-16 08:00:47 EDT

PhotosVideosAllPeople
LatestRanked
@threadlinqs.bsky.socialOct 15, 2026, 12:06 AM

Trane Tracer building controllers: a weak-crypto auth bypass hands attackers root. Patch and isolate. https://intel.threadlinqs.com/threat/TL-2026-3567 #ThreatIntel #CVE_2026_28252 #ICSA2607101 #Trane

CVE-2026-28252 - Trane Tracer SC/SC+/Concierge Broken Cryptographic Algorithm Authentication Bypass
@threadlinqs.bsky.socialOct 14, 2026, 11:01 PM

One endless HTTP header can knock a Trane Tracer building controller offline - no auth needed. https://intel.threadlinqs.com/threat/TL-2026-3561 #ThreatIntel #CVE_2026_28253 #Tenable #ICSA2607101

CVE-2026-28253: Trane Tracer SC, Tracer SC+ and Tracer Concierge Memory Allocation with Excessive Size Value (Unauthenticated DoS)
@threadlinqs.bsky.socialOct 14, 2026, 9:51 PM

Trane Tracer BMS controllers leak sensitive data to unauthenticated attackers via unprotected APIs. https://intel.threadlinqs.com/threat/TL-2026-3555 #ThreatIntel #CVE_2026_28254 #ICSA2607101 #Tracer

CVE-2026-28254: Missing Authorization in Trane Tracer SC, Tracer SC+ and Tracer Concierge Building Management Controllers
@threadlinqs.bsky.socialOct 14, 2026, 9:28 PM

Trane Tracer HVAC controllers ship the same Blowfish-decryptable remote-service creds to every device. https://intel.threadlinqs.com/threat/TL-2026-3553 #ThreatIntel #CVE_2026_28255 #Blowfish #ICSA2607101

CVE-2026-28255: Trane Tracer SC / Tracer SC+ / Tracer Concierge Use of Hard-coded Credentials
@threadlinqs.bsky.socialOct 14, 2026, 9:10 PM

Hard-coded constants in Trane Tracer building controllers can expose data and enable account takeover. https://intel.threadlinqs.com/threat/TL-2026-3552 #ThreatIntel #CVE_2026_28256 #ICSA2607101 #Trane

CVE-2026-28256: Hard-coded Security-Relevant Constants in Trane Tracer SC, Tracer SC+ and Tracer Concierge