Johnson Controls victor Web improper privilege management allows unauthorized privilege use on Windows before version 7.1

Last refreshed2026-09-30

Status: NEW | Advisory ID: CVE-2026-34496

Key Details

CVE	CVE-2026-34496
CVSS Score / Version	7.1 (High) / CVSS v4.0
Updated	2026-07-30
Classified as	CWE-269 (Improper Privilege Management)

Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233.

This issue affects victor Web: before 7.1. (NVD)

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-34496
CVE	https://www.cve.org/CVERecord?id=CVE-2026-34496

Source

Reference

NVD

CVE