This vulnerability (CVE-2026-34496) in Johnson Controls victor Web on Windows is categorized under CWE-269, indicating improper privilege management. It affects versions before 7.1. The CVSS 4.0 base score is 7.1, reflecting a high severity with network attack vector, high complexity, partial privileges required, no user interaction, and high impact on confidentiality and moderate impact on integrity and availability. No vendor advisory or patch information is available, and no known exploits are reported in the wild.

The vulnerability allows an attacker with partial privileges to potentially perform unauthorized actions due to improper privilege management. This could lead to unauthorized access or modification of sensitive information or system functions within victor Web. The high CVSS score indicates significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to affected versions and monitor for unusual activity related to privilege escalation attempts.