CVE-2026-71455EUVD-2026-109979
Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 9.20
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The vulnerability affects Johnson Controls Kantech Entrapass, an access control and security management software product. It could allow an attacker to retrieve sensitive data that is stored in memory without encryption.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue affects Kantech Entrapass: before 9.20.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- Johnson Controls Kantech Entrapass
fixed in 9.20