CVE-2025-26155
Published Nov 26, 2025NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability.
Vendor/product archive
2 CVEs tagged to ncp-e / ncp_secure_entry_client — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.
NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability.
The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected client software, "Sophos IPSec Client" 11.04 is a rebranded ve…