High severity · published Jul 23, 2026
CVE-2026-34496
victor Web - Priviledge Escalation
7.1
CVSS
0.3%
EPSS
No
On KEV
Description
Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233.
This issue affects victor Web: before 7.1.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VW
victor Web · Johnson Controls
before 7.1 · source: vendor