Johnson Controls C-CURE 9000 & Victor Server Vulnerability — Dallas-Fort Worth Contact-Center Operations at Risk

A critical (Sev 10) vulnerability has been identified in Johnson Controls' C-CURE 9000 access control and Victor video management application servers, widely deployed in enterprise and contact-center facilities for physical security and building access management. Exploitation could allow unauthorized physical access, credential theft, or lateral movement into broader facility and IT networks — directly threatening site integrity and staff safety at DFW's high-density contact-center and back-office hubs (~315,000+ seats). Operations leaders with Johnson Controls physical security infrastructure should treat this as an urgent patch/mitigation priority and coordinate with facilities teams to assess exposure, restrict network access to affected servers, and verify vendor guidance is actioned.