CVE-2026-21653 | Johnson Controls CCure 9000/Victor Application Server up to 3.0 server-side request forgery

July 23, 2026 Yanac

A vulnerability was found in Johnson Controls CCure 9000 and Victor Application Server up to 3.0. It has been declared as critical. This affects an unknown function. Such manipulation leads to server-side request forgery.

This vulnerability is listed as CVE-2026-21653. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More