CVE-2026-21653EPSS p30.7%

CVE-2026-21653CVE-2026-21653

Description

Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0.

Scoring

EPSS0.39% probability of exploitation · percentile 30.7% · 2026-10-06T12:00:23Z
Last modified2026-07-30
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.