Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
ncp-e records in CISA KEVNo ncp-e vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 50
NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00611 · Published 2025-11-26 · No fix listed CWE-426
Priority LOW 36
The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com).
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.00611 · Published 2019-04-09 · No fix listed CWE-345
Open these records in search →