anonhaven

CVE-2026-34496

HIGH CVSS 4.0: 7.1 EPSS 0.21%
Updated Jul 24, 2026
Cwe-269
Parameter Value
CVSS 7.1 (HIGH)
Affected Versions before 7.1.
Type CWE-269 (Improper Privilege Management)
Vendor Cwe-269
Public PoC No

Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before 7.1.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
High
Difficult to exploit
Attack Requirements
Present
Additional conditions required
Privileges Required
High
Admin privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
Low
Partial data modification
Availability
Low
Partial disruption

CVSS Vector v4.0

Weakness Type (CWE)

CWE-269 Improper Privilege Management

References 1

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories
productsecurity@jci.com
Share Post Share Share Share