CVE-2026-21655

Description

Deserialization of untrusted data vulnerability in Johnson Control victor on Windows allows capec-586. This issue affects victor: from 2.9 before 3.0.

References

• https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories