CVE-2017-17023

CVE-2017-17023 affects Sophos UTM VPN endpoint using the NPC Engineering (NCP) Secure Entry Client 10.11 r32792 family (Sophos IPSec Client 11.04). The vulnerability lies in the VPN client’s software update feature: update metadata is fetched over HTTP (insecure) and the client does not verify th...

CVE-2025-26155

NCP Secure Enterprise Client version 13.18 and NCP Secure Entry Windows Client version 13.19 are vulnerable to an Untrusted Search Path issue (CWE-426). This security flaw arises from an insecure search path configuration, which could allow an attacker to achieve malicious code execution . Remedi...