Memory Vulnerability in Johnson Controls Kantech Entrapass
CVE-2026-71455

5.3MEDIUM

Key Information:

Vendor

Johnson Controls

Status
Kantech Entrapass
Vendor
CVE Published:
26 October 2026

What is CVE-2026-71455?

A memory vulnerability in Johnson Controls Kantech Entrapass allows for the cleartext storage of sensitive information, enabling unauthorized retrieval of embedded data. This issue is found in versions prior to 9.20, posing a risk of exposure to critical information that could be exploited by malicious actors.

Affected Version(s)

Kantech Entrapass 0 < 9.20

References

https://www.johnsoncontrols.com/trust-center/cybersecurit...

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.