Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-21653

CCure and Victor Application Server - Server Side Request Forgery

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jci

Description

Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Johnson Controls CCure 9000 and victor application server

Default version status: unaffected

  • 2.9 to ≤ 3.0affected

References