Johnson Controls CCure 9000

• CVE-2026-21655 High 8.7 C-CURE 9000 and Victor application server - Deserialization of Untrusted Data 0.5%
• CVE-2021-36201 Medium 4.3 CCURE Observable Response Discrepancy 0.6%