CVE-2026-216537.2High
CCure and Victor Application Server - Server Side Request Forgery
Johnson Controls · CCure 9000 and victor application server
Not in CISA KEV
0.4%probability of exploitation in the next 30 days
32nd percentile
050100
Higher than 32% of scored CVEs
7.2HighCVSS 4.0
LowMediumHighCrit.
DescriptionNVD
Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 29 Jul.
- Johnson Controls apps flaw CVE-2026-21653 enables RCESecurityOnline · first in our coverage
New articles also arrive in the RSS feed.