VULNERABILITY INTELLIGENCE
CVE-2026-21653
EPSS probability0.39%
CISA KEVNot currently listed
Published2026-07-23
Last modified2026-10-24
Description
Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-918