CVE-2026-34496: Johnson Controls Victor Web

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before 7.1.

Affected products

• Johnson Controls Victor Web: before 7.1 (fixed in 7.1)

Published 2026-07-23. Last modified 2026-07-30.