CVE-2025-26155

The Untrusted Search Path vulnerability occurs when an application does not restrict the search paths for executable files or dynamic libraries to trusted system locations during file lookup. An attacker can place a malicious file (such as a DLL library) in a location that will be searched before the correct system path. When the application loads the substituted file, the code supplied by the attacker is executed in the context of the VPN client process.

An attacker can gain full control over the victim's system by executing arbitrary code with the privileges of the VPN client process, which may lead to breach of confidentiality, integrity, and availability of the system.

Apply patches available from the vendor in accordance with the references — detailed information about patched versions is available on the vendor's website (ncp-e.com) and in the Axians Pentest report (pentest.axians.de).

NCP Secure Enterprise Client version 13.18 and NCP Secure Entry Windows Client version 13.19.