https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T19:37:49.659297+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-19255 cnvd-2020-19255 2026-10-26T19:37:49.662771+00:00 cnvd-2020-19255 https://cve.radiocsirt.org/vuln/euvd-2026-51595 EUVD-2026-51595 2026-10-26T19:37:49.662805+00:00 EUVD-2026-51595 https://cve.radiocsirt.org/vuln/fkie_cve-2019-7589 fkie_cve-2019-7589 2026-10-26T19:37:49.662819+00:00

A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malicious code to the server that could be executed at system level privileges. This affects Johnson Controls' Kantech EntraPass Corporate Edition versions 8.0 and prior; Kantech EntraPass Global Edition versions 8.0 and prior.

 https://cve.radiocsirt.org/vuln/ghsa-pr7r-78gh-g536 GHSA-pr7r-78gh-g536 2026-10-26T19:37:49.662848+00:00

A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malicious code to the server that could be executed at system level privileges. This affects Johnson Controls' Kantech EntraPass Corporate Edition versions 8.0 and prior; Kantech EntraPass Global Edition versions 8.0 and prior.

 https://cve.radiocsirt.org/vuln/gsd-2019-7589 gsd-2019-7589 2026-10-26T19:37:49.662865+00:00 gsd-2019-7589 https://cve.radiocsirt.org/vuln/icsa-20-070-04 ICSA-20-070-04 — ICSA-20-070-04_Johnson Controls Kantech EntraPass 2026-10-26T19:37:49.662876+00:00

An issue with an API may allow an attacker to upload and execute malicious code with system-level privileges.CVE-2019-7589 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).