CVE-2026-21653
CCure and Victor Application Server - Server Side Request Forgery
Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0.
CVSS 4.0 · 7.2 High
EPSS < 1%
KEV · Not listed
Vendors
Products