CVE-2026-71456

Published: Ott 26, 2026 Last Modified: Ott 26, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 8,5

Source: [email protected]

Attack Vector: local

Attack Complexity: low

Privileges Required: low

User Interaction: none

Confidentiality: N/A

Integrity: N/A

Availability: N/A

Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack.

This issue affects Kantech Entrapass: before 9.20.

321

Draft

Abstraction: Variant Structure: Simple

Security Scopes Affected:

Access Control

Potential Impacts:

Bypass Protection Mechanism Gain Privileges Or Assume Identity Read Application Data

Technologies: ICS/OT

Likelihood of Exploit: High

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories