Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-21655

C-CURE 9000 and Victor application server - Deserialization of Untrusted Data

Description

Deserialization of untrusted data vulnerability in Johnson Control victor on Windows, Johnson Controls CCure 9000, and Johnson Controls Victor Application Server allows capec-586. This issue affects victor: before 8.0; CCure 9000: before 3.2; Victor Application Server: before 4.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Johnson Control victor

Default version status: unaffected

  • 0 to < 8.0affected

Johnson Controls CCure 9000

Default version status: unaffected

  • 0 to < 3.2affected

Johnson Controls Victor Application Server

Default version status: unaffected

  • 0 to < 4.1affected

References