CVE-2026-71455

0th percentile - higher than 0% of all known CVEs

Cleartext storage of sensitive information in memory in Johnson Controls Kantech Entrapass allows retrieval of embedded sensitive data. The issue affects Kantech Entrapass before 9.20.

An attacker with access to process memory could recover sensitive data such as credentials or keys. This may lead to unauthorized access to the access control system.

Update Kantech Entrapass to version 9.20 or later. Restrict local access to system processes and memory.