Vendors and CVEs › Vendors › Johnson Controls
Johnson Controls: industrial cyber security news and vulnerabilities
2 stories in Industrial Cyber Brief name Johnson Controls, from Monday 19 October 2026 to Wednesday 28 October 2026. Newest first; each links the full story with who is affected and what to do.
The stories
Low
Johnson Controls access control software has two confirmed flaws
Johnson Controls has confirmed two vulnerabilities in Kantech Entrapass versions before 9.20. The Canadian Cyber Centre urges users to review the vendor advisories and apply updates as they become available.
Medium
Johnson Controls reports flaw in American Dynamics VMS before version 3.10
As of 7 October 2026, Johnson Controls is affected by a vulnerability in ADVMS (American Dynamics VMS) in versions before 3.10. Advisory reference: JCI-PSA-2026-17.