[Control systems] Johnson Controls security advisory (AV26-1090)

Serial number: AV26-1090
Date: October 27, 2026

As of October 26, 2026, Johnson Controls is affected by vulnerabilities in the following product:

• Kantech Entrapass
  • Prior to 9.20

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Johnson Controls has confirmed two vulnerabilities impacting Kantech Entrapass (PDF)
• Johnson Controls Product Security Advisories