{"id":"CVE-2026-71455","kind":"vulnerability","aliases":["CVE-2026-71455"],"related":[],"title":"Johnson Controls Kantech Entrapass: cleartext secrets in memory let attackers read data","description":"Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Kantech Entrapass: before 9.20.","summary":"Johnson Controls Kantech Entrapass stores sensitive information in cleartext in memory, per the vendor-neutral CVE description. An attacker who can reach the process memory or a dump of it can retrieve embedded sensitive data.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["access-control","kantech-entrapass","on-prem","vendor","windows"],"not_affected_if":["version-9.20-or-later"],"how_to_check":"- Check the installed Entrapass version in the Entrapass server or client about screen, if available\n- unknown for other steps; the sources do not say how to inspect memory exposure","fix":"- Upgrade Kantech Entrapass to `9.20` or later\n- unknown for other mitigations; the sources do not say","status":"open","published_at":"2026-10-26T17:17:28+00:00","first_seen_at":"2026-10-26T17:31:22+00:00","triaged_at":"2026-10-26T17:33:25+00:00","updated_at":"2026-10-26T17:33:25+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-10-26T17:33:25Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Kantech Entrapass to `9.20` or later\n- unknown for other mitigations; the sources do not say","reach":"unknown","title":"Johnson Controls Kantech Entrapass: cleartext secrets in memory let attackers read data","impact":"medium","summary":"Johnson Controls Kantech Entrapass stores sensitive information in cleartext in memory, per the vendor-neutral CVE description. An attacker who can reach the process memory or a dump of it can retrieve embedded sensitive data.","category":"vendor","nicknames":[],"who_cares":["kantech-entrapass","access-control","on-prem","windows"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker retrieves embedded sensitive data from memory","analyst_note":"Check the Johnson Controls advisory and the NVD entry for attack prerequisites, the exact data exposed and the vendor's detection steps.","how_to_check":"- Check the installed Entrapass version in the Entrapass server or client about screen, if available\n- unknown for other steps; the sources do not say how to inspect memory exposure","needs_analyst":true,"not_affected_if":["version-9.20-or-later"],"who_is_affected":"Organizations running Kantech Entrapass builds before 9.20 are affected. Systems running 9.20 or later are not listed as affected. The sources do not say which deployment roles or configurations are most exposed.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000599,"input_tokens":3300,"output_tokens":537,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-71455':15A,18A '9.20':90C 'access':20B 'access-control':19B 'affect':86C 'allow':79C 'attack':10A,49B 'cleartext':5A,38B,66C 'control':2A,21B,31B,76C 'cve':13A,16A,46B 'data':12A,65B,83C 'descript':47B 'dump':58B 'embed':63B,81C 'entrapass':4A,24B,33B,78C,88C 'inform':36B,70C 'issu':85C 'johnson':1A,30B,75C 'kantech':3A,23B,32B,77C,87C 'kantech-entrapass':22B 'let':9A 'memori':8A,40B,55B,72C 'neutral':45B 'on-prem':25B 'per':41B 'prem':27B 'process':54B 'reach':52B 'read':11A 'retriev':62B,80C 'secret':6A 'sensit':35B,64B,69C,82C 'storag':67C 'store':34B 'vendor':28B,44B 'vendor-neutr':43B 'vulner':73C 'window':29B","nicknames":[],"mitigations":[],"who_affected":"Organizations running Kantech Entrapass builds before 9.20 are affected. Systems running 9.20 or later are not listed as affected. The sources do not say which deployment roles or configurations are most exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T17:17:28+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"productsecurity@jci.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-71455","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-71455","severity":null,"published_at":"2026-10-26T17:17:28+00:00","modified_at":"2026-10-26T17:17:28+00:00","first_seen_at":"2026-10-26T17:31:22+00:00","fetched_at":"2026-10-26T17:31:22+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}