CVE-2026-71455

CVSS 5.3 (medium) · published 2026-10-26

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue affects Kantech Entrapass: before 9.20.

Weakness: CWE-316

Source: NVD CVE-2026-71455

References

• https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.