CVE-2026-21655 — C-CURE 9000 and Victor application server - Deserialization of Untrusted Data
Deserialization of untrusted data vulnerability in Johnson Control victor on Windows, Johnson Controls CCure 9000, and Johnson Controls Victor Application Server allows capec-58…
Published: 2026-07-23 · CVSS: 8.7 · CVSS 4.0
Deserialization of untrusted data vulnerability in Johnson Control victor on Windows, Johnson Controls CCure 9000, and Johnson Controls Victor Application Server allows capec-586. This issue affects victor: before 8.0; CCure 9000: before 3.2; Victor Application Server: before 4.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7