Ncp-e - vulnerabilities (CVEs)
10 CVEs in 6 products, 0 in the last 30 days, newest from 2026-02-05.
Products
- Secure Enterprise Client - 8 CVEs
- Ncp Secure Entry Client - 3 CVEs
- Secure Client - 1 CVEs
- Secure Entry Client - 1 CVEs
- Vpn Universal Secure Enterprise Client - 0 CVEs
- Vpn Universal Secure Entry Client - 0 CVEs
Newest CVEs of Ncp-e
- CVE-2019-25281 - CVSS 8.5 (high), 2026-02-05: NCP Secure Entry Client 9.2 contains an unquoted service path vulnerability in multiple Windows services that allows local users to potentially execute…
- CVE-2025-26155 - CVSS 9.8 (critical), 2025-11-26: NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability.
- CVE-2023-28872 - CVSS 8.8 (high), 2023-12-25: Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a…
- CVE-2023-28869 - CVSS 6.5 (medium), 2023-12-09: Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a…
- CVE-2023-28868 - CVSS 8.1 (high), 2023-12-09: Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operating system by creating a symbolic link.
- CVE-2023-28871 - CVSS 4.3 (medium), 2023-12-09: Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to read registry information of the operating system by creating a symbolic…
- CVE-2023-28870 - CVSS 6.5 (medium), 2023-12-09: Insecure File Permissions in Support Assistant in NCP Secure Enterprise Client before 12.22 allow attackers to write to configuration files from…
- CVE-2020-11474 - CVSS 7.8 (high), 2020-07-28: NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant.
- CVE-2017-17023 - CVSS 8.1 (high), 2019-04-09: The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected client software, "Sophos IPSec Client"…
- CVE-2010-5203 - CVSS 6.9 (medium), 2012-09-06: Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure…
