Hard-Coded Cryptographic Key Vulnerability in Johnson Controls Kantech Entrapass

CVE-2026-71456

What is CVE-2026-71456?

The Kantech Entrapass system by Johnson Controls exhibits a vulnerability due to the presence of hard-coded cryptographic keys, enabling attackers to potentially exploit a Padding Oracle Crypto Attack. This issue specifically affects versions prior to 9.20, representing a significant risk for users relying on this access control solution. For remediation and more information, refer to the cybersecurity advisory provided by Johnson Controls.

References