CVE-2026-106019: Security vulnerability

Published Nov 6, 2026

Updated

Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known Operating System Credentials.

This issue affects C-CURE 9000, Victor: 3.20.

Event History

Nov 6, 2026

CVE Published

via MITRE·02:21 PM

Data Sourced

via MITRE·02:21 PM

DescriptionWeakness

Frequently Asked Questions

How can I determine whether my deployment is within the stated affected scope?

Check whether you operate Johnson Controls C-CURE 9000 or Victor version 3.20. The provided information identifies that version as affected.

Where can I look for vendor remediation information?

Consult the Johnson Controls cybersecurity security advisories referenced for this issue.

CVE-2026-106019: Security vulnerability

Event History

Frequently Asked Questions

How can I determine whether my deployment is within the stated affected scope?

Where can I look for vendor remediation information?

Company

Resources

Contact

Frequently Asked Questions

How can I determine whether my deployment is within the stated affected scope?

Where can I look for vendor remediation information?