Skip to content
OpenAdvisories
High · 8.8 CVE-2026-106019 EUVD-2026-118270GHSA-f882-68pv-mxwr

Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known Operating System…

Published Nov 6, 2026 · Updated Nov 11, 2026 · Assigned by jci

Description

Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known Operating System Credentials.

This issue affects C-CURE 9000, Victor: 3.20.

Affected products

VendorProductAffectedFixed
Johnson Controls C-CURE 9000, Victor 3.20 —

References