Ncp-e Ncp Secure Entry Client — known CVE vulnerabilities

Every CVE whose affected-product data names Ncp-e Ncp Secure Entry Client, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-26155 — CVSS 9.8 (critical): NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability.
• CVE-2017-17023 — CVSS 8.1 (high): The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected client software…