Description
Deserialization of untrusted data vulnerability in Johnson Control victor on Windows, Johnson Controls CCure 9000, and Johnson Controls Victor Application Server allows capec-586.
This issue affects victor: before 8.0; CCure 9000: before 3.2; Victor Application Server: before 4.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Johnson Control | victor | < 8.0 | 8.0 |
| Johnson Controls | CCure 9000 | < 3.2 | 3.2 |
| Johnson Controls | Victor Application Server | < 4.1 | 4.1 |
Advisories 1
- ICSA-26-204-01 Johnson Controls C-CURE 9000 and Victor application server (Update A) CISA ICS & IT advisories · Aug 11, 2026