[Control systems] Johnson Controls security advisory (AV26-1090)

Reported by Canadian Centre for Cyber Security

Summary by Cyber Security News27 Oct 2026, 15:02 CET

About this summary. This is a short excerpt from the description that Canadian Centre for Cyber Security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://cyber.gc.ca/en/alerts-advisories/control-systems-johnson-controls-security-advisory-av26-1090

Serial number: AV26-1090 Date: October 27, 2026 As of October 26, 2026, Johnson Controls is affected by vulnerabilities in the following product: Kantech Entrapass Prior to 9.20 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Johnson Controls has confirmed two vulnerabilities impacting Kantech Entrapass (PDF) Johnson Controls Product Security Advisories

Read the full article at Canadian Centre for Cyber Security →

Source attribution: headline and facts are from Canadian Centre for Cyber Security (cyber.gc.ca). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

Bellini Capital CISO on AI security governance and the limits of patching faster

Bringing Hardware Security Education to All: A Seamless Curriculum Integration Approach

PHP2Shell and the Future of AI-Discovered Vulnerability Disclosure: Evidence, Verification, and Human Authority

Silent Blindness: Fault Vulnerability of Hardware Malware Detectors

Ars Technica: Code-execution flaw in UEFI firmware affects most servers on planet Earth

Vulnerabilities in golang.org/x/net