High · 8.5 CVE-2026-71456 EUVD-2026-109980GHSA-378c-wr7c-cmxq

Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack. This issue aff…

Published Oct 26, 2026 · Updated Nov 2, 2026 · Assigned by jci

Description

Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack.

This issue affects Kantech Entrapass: before 9.20.

Vendor	Product	Affected	Fixed
Johnson Controls	Kantech Entrapass	< 9.20	9.20