CVE-2006-0968: The ncprwsnt service in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions...

Security readout for executives and security teams

This is a legacy local code-execution issue in NCP Network Communication Secure Client. A local user could alter a batch script that the client service runs after a VPN connection is established. Business risk is mainly on endpoints still running this old client, especially shared or tightly controlled workstations. Exposure is likely limited to systems with NCP Network Communication Secure Client installed, particularly version 8.11 Build 146. The record says other versions may be affected, but does not identify exact ranges or supported replacement versions. Treat this as a targeted legacy endpoint risk. It is not documented as internet-exploitable or actively exploited, but it can matter on shared endpoints or environments where local user boundaries are important. Prioritize inventory and removal or vendor-supported upgrade. Mitigation focus: Inventory endpoints for NCP Network Communication Secure Client installations.; Prioritize version 8.11 Build 146 and adjacent legacy builds for review.; Check current NCP vendor guidance for fixed or supported versions..

Prepared

Jun 29, 2026, 14:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.