CVE-2026-71456

Vulnerability Description

Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack. This issue affects Kantech Entrapass: before 9.20.

Related Weaknesses (CWE)

CWE-321

References

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

FAQ

What is CVE-2026-71456?

CVE-2026-71456 is a documented vulnerability. Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack. This issue affects Kantech Entrapass: before 9.20.

How severe is CVE-2026-71456?

CVSS scoring is not yet available for CVE-2026-71456. Check NVD for updates.

Is there a patch for CVE-2026-71456?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.