vulnerability Johnson Controls C-CURE 9000 and Victor application server Johnson Controls has issued security advisories regarding critical vulnerabilities in its C-CURE 9000 and Victor application servers, as well as the victor Web application. Exploitation could allow an unauthenticated attacker on a neighboring network to execute arbitrary code, potentially impacting physical security co… CISA Advisories · Jul 23, 2026 High CVE-2026-21655CVE-2026-21653CVE-2026-34496cve-2026-21653cve-2026-21655cve-2026-34496