๐Ÿ” CVE Alert

CVE-2026-21653

UNKNOWN 0.0

CCure and Victor Application Server - Server Side Request Forgery

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0.

Vendor johnson controls
Product ccure 9000 and victor application server
Published Jul 23, 2026
Stay Ahead of the Next One

Get instant alerts for johnson controls ccure 9000 and victor application server

Be the first to know when new unknown vulnerabilities affecting johnson controls ccure 9000 and victor application server are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Johnson Controls / CCure 9000 and victor application server
2.9 โ‰ค 3.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
johnsoncontrols.com: https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories