Johnson Controls Victor Application Server vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Johnson Controls Victor Application Server: 1 record(s), with affected versions and fixes.

CVE-2026-21655 High · 8.7 CWE-502 Jul 23, 2026

C-CURE 9000 and Victor application server - Deserialization of Untrusted Data

Deserialization of untrusted data vulnerability in Johnson Control victor on Windows, Johnson Controls CCure 9000, and Johnson Controls Victor Application Server allows capec-586. This issue affects victor: before 8.0; CCure 9000: before 3.2; Victor Application Server: before 4.1.