Question 1

What is CVE-2026-21653 — CVE-2026-21653?

Accepted Answer

Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0.

Question 2

What is the authoritative source for CVE-2026-21653?

Accepted Answer

CVE-2026-21653 (CVE-2026-21653) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-21653CVE-2026-21653

Description

Scoring