CVE-2026-34496highCWE-269

CVE-2026-34496: high-severity vulnerability in Johnson Controls victor Web

victor Web - Priviledge Escalation

Published 23 Jul 2026 · Updated 24 Jul 2026

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.3%

Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before 7.1.

CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L

Affected products

References