July 29, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-21653NVD

Vulnerability Summary

Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery.

This issue affects CCure 9000 and victor application server: from 2.9 through 3.0.
Severity Level
UNKNOWN
Published Date
Jul 23, 2026
Last Modified
Jul 24, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.23%Probability
Root Weakness (CWE)
N/A

External References