Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-71456

Hard‑coded Cryptographic Key Enables Padding Oracle Attack in Kantech Entrapass

Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack. This issue affects Kantech Entrapass: before 9.20.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Johnsoncontrols
Products
Kantech Entrapass
CVE-2026-71455

Cleartext Sensitive Data Stored in Memory Exposure

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue affects Kantech Entrapass: before 9.20.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Johnsoncontrols
Products
Kantech Entrapass
CVE-2020-9046

Kantech EntraPass Security Management Software - System Permissions Vulnerability

A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user to gain full system-level privileges by replacing critical files with specifically crafted files.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Johnsoncontrols
Products
Kantech Entrapass