EUVD-2026-48425

Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0...

Johnson Controls Software House C-CURE 9000 Log Message Disclosure Vulnerability

Johnson Controls Software House C-CURE 9000 is a scalable multi-site access control and alarm monitoring system from Johnson Controls, Inc. A log information disclosure vulnerability exists in Johnson Controls Software House C-CURE 9000 version 3.00.2, which originates from recording detailed...