Skip to content
Sign in
CVE-2026-216558.7HighCWE-502

C-CURE 9000 and Victor application server - Deserialization of Untrusted Data

Johnson Control · victor

Not in CISA KEVVendor fix available
0.5%probability of exploitation in the next 30 days
42nd percentile
050100

Higher than 42% of scored CVEs

8.7HighCVSS 4.0
LowHigh

DescriptionNVD

Deserialization of untrusted data vulnerability in Johnson Control victor on Windows, Johnson Controls CCure 9000, and Johnson Controls Victor Application Server allows capec-586. This issue affects victor: before 8.0; CCure 9000: before 3.2; Victor Application Server: before 4.1.

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 29 Jul.

  1. Johnson Controls apps flaw CVE-2026-21653 enables RCE
    SecurityOnline · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.

References

CyberSIXTSignal over noise
Updated AboutDevelopersSign in