Johnson Controls Kantech Entrapass vulnerabilities

Johnson Controls has confirmed two vulnerabilities impacting Kantech Entrapass software. These vulnerabilities affect all versions prior to 9.20. Detailed technical information and specific CVE identifiers were not disclosed in the initial advisory; users are directed to the Johnson Controls Trust Center for further updates and remediation guidance.

Recommendation

• Inventory all systems running Kantech Entrapass within the environment.
• Review the Johnson Controls product security advisory (PSA-2026-21) to determine the specific risk and requirements for your environment.
• Plan and execute an upgrade to Kantech Entrapass version 9.20 or later for all affected installations.