Johnson Controls CCure 9000 and victor application server vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Johnson Controls CCure 9000 and victor application server: 1 record(s), with affected versions and fixes.

CVE-2026-21653 High · 7.2 CWE-918 Jul 23, 2026

CCure and Victor Application Server - Server Side Request Forgery

Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0.