Johnson Controls Kantech Entrapass before 9.20 has two flaws
Original title: [Control systems] Johnson Controls security advisory (AV26-1090)
Canada's Cyber Centre says Johnson Controls confirmed two vulnerabilities and urges administrators to apply updates when available.
On October 27, 2026, the Canadian Centre for Cyber Security issued advisory AV26-1090 for control-system software. As of October 26, 2026, Johnson Controls is affected by two vulnerabilities in Kantech Entrapass prior to 9.20. The centre tells users and administrators to review the linked Johnson Controls advisories and apply necessary updates as they become available. The notice does not describe the flaw types, impact, or exploitation status.
Unconfirmed: The notice does not state what the two vulnerabilities allow or whether they are exploited.
- The advisory serial number is AV26-1090 and the date is October 27, 2026.
- Johnson Controls confirmed the two vulnerabilities in a product security PDF.
- The Cyber Centre says updates should be applied as they become available.
| Product | Affected |
|---|---|
| Johnson Controls Kantech Entrapass | Prior to 9.20 |
- 1.Review the Johnson Controls product security advisories linked from AV26-1090.
- 2.Apply necessary Kantech Entrapass updates as they become available.
- Vendors
- Johnson Controls
- Products
- Kantech Entrapass
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1090 Date: October 27, 2026 As of October 26, 2026, Johnson Controls is affected by vulnerabilities in the following product: Kantech Entrapass Prior to 9. 20 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.