Ncp-e vulnerabilities
Published CVEs affecting Ncp-e products: 2 record(s), with severity, exploitation and fixes.
CVE-2019-25281
High · 7.8
CWE-428 Feb 4, 2026
NCP_Secure_Entry_Client 9.2 - Unquoted Service Paths
NCP Secure Entry Client 9.2 contains an unquoted service path vulnerability in multiple Windows services that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted paths in services like ncprwsnt, rwsrsu, ncpclcfg, and NcpSec to inject malicious code that would execute with LocalSystem privileges during service startup.
CVE-2025-26155
Critical · 9.8
CWE-426 Nov 26, 2025
Untrusted Search Path in Ncp-e Ncp Secure Entry Client
NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability.