CVE-2024-32861: Johnson Controls Software House C•cure 9000 Installer

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Under certain circumstances the impacted Software House C•CURE 9000 installer will utilize unnecessarily wide permissions.

Affected products

• Johnson Controls Software House C•cure 9000 Installer: up to and including 2.8
• Johnsoncontrols Software House C-Cure 9000: up to and including 3.00.3

Published 2024-07-16. Last modified 2026-06-17.