Johnson Controls Kantech Entrapass

• CVE-2026-71456 High 8.5 Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack. This issue affects Kantech Entrapass: before 9.20. <0.1%
• CVE-2026-71455 Medium 5.3 Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue affects Kantech Entrapass: before 9.20. <0.1%