Johnson Controls C-CURE 9000 and Victor application server

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker with network access to achieve remote code execution. The following versions of Johnson Controls C-CURE 9000 and Victor application server are affected: C-CURE 9000 and victor <=v2.90_v3.0 victor Web <=v7.1 CVSS Vendor Equipment Vulnerabilities v3 9.6 Johnson Controls Johnson Controls C-CURE 9000 and…

Read at the source

Summary written for cymesh.dev. The full article lives at CISA Advisories.

Topics

rce

~/cymesh.net

Certificates expire quietly

cymesh.net watches your TLS and SSL certificates and warns you before one lapses.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Talk to us See cymesh.net

~/related/johnson-controls-c-cure-9000-and-victor-application-server-1xw5uh

2026-08-01 14:20 UTC[high]

Johnson Controls C-CURE 9000 and Victor application server

Topics

Certificates expire quietly

Related

Rails patches critical Active Storage flaw with RCE potential

Ruby on Rails Patches Critical Vulnerability

JetBrains warns of critical TeamCity remote code execution flaw

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

vBulletin fixes critical pre-auth RCE flaw with public exploit