CVE-2026-34496

Overview

Johnson Controls
victor Web

23 Jul 2026

Published

24 Jul 2026

Updated

CVSS v4.0

HIGH (7.1)

EPSS

0.20%

MITRE

KEV

Description

Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before 7.1.

Statistics

1 Post

Last activity: 17 hours ago

Bluesky

boredchilada @cyfar.ca

~Cisa~ Critical RCE, SSRF, and privilege escalation vulnerabilities in Johnson Controls C-CURE 9000 and Victor enable unauthenticated adjacent-network attackers to execute arbitrary code. - IOCs: CVE-2026-21655, CVE-2026-21653, CVE-2026-34496 - ...

0
0
0
17h ago

CVE-2026-21653

Overview

Johnson Controls
CCure 9000 and victor application server

23 Jul 2026

Published

24 Jul 2026

Updated

CVSS v4.0

HIGH (7.2)

EPSS

0.23%

MITRE

KEV

Description

Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0.

Statistics

1 Post

Last activity: 17 hours ago

Bluesky

boredchilada @cyfar.ca

~Cisa~ Critical RCE, SSRF, and privilege escalation vulnerabilities in Johnson Controls C-CURE 9000 and Victor enable unauthenticated adjacent-network attackers to execute arbitrary code. - IOCs: CVE-2026-21655, CVE-2026-21653, CVE-2026-34496 - ...

0
0
0
17h ago

CVE-2026-62878

Overview

Microsoft
Windows 10 Version 1607

11 Aug 2026

Published

12 Aug 2026

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

Pending

MITRE

KEV

Description

Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.

Statistics

1 Post

Last activity: 9 hours ago

Bluesky

boredchilada @cyfar.ca

@talosintelligence.com Microsoft's August 2026 update patches 421 vulnerabilities, including 62 critical and one actively exploited EoP flaw (CVE-2026-68820). - IOCs: CVE-2026-68820, CVE-2026-62893, CVE-2026-62878 - #CVE #PatchTuesday #ThreatIntel

0
0
0
9h ago