{"id":"CVE-2026-71455","revision":"d1f03faeedcf4636bf370bb193f6e6b4","records":[{"revision":"d1f03faeedcf4636bf370bb193f6e6b4","observedAt":"2026-10-26T17:35:31.029+00:00","statement":{"source":"cve-program","id":"CVE-2026-71455","aliases":[],"title":"Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data.","description":"Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Kantech Entrapass: before 9.20.","state":0,"publishedAt":"2026-10-26T16:17:47.898+00:00","modifiedAt":"2026-10-26T16:17:47.898+00:00","affected":[{"ecosystem":"Vendor product","name":"Kantech Entrapass","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Johnson Controls\",\n                    \"product\": \"Kantech Entrapass\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"9.20\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","score":5.3,"severity":"MEDIUM"}],"references":["https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-71455","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-71455","identifiers":["CVE-2026-71455"]},"retained":false,"historicalAffected":[]}],"coverage":[]}