CVE-2018-10201: An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11.

Security readout for executives and security teams

CVE-2018-10201 lets an unauthenticated remote user read files outside the intended web root in NComputing NC Monitor Server. For executives, the business risk is unauthorized disclosure of sensitive local files from systems running affected vSpace Pro 10 or 11 components, especially if TCP port 8667 is reachable. Exposure is most likely where NComputing vSpace Pro 10 or 11 includes NC Monitor Server and TCP port 8667 is reachable from users, partners, VPN clients, or the internet. Treat this as a near-term remediation item if affected systems are reachable beyond a tightly controlled admin network. The main risk is data exposure, not confirmed active exploitation based on the provided sources. Mitigation focus: Apply the NComputing Health Monitor Server vulnerability patch from vendor guidance.; Restrict TCP port 8667 to trusted management networks only.; Remove public internet access to NC Monitor Server..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.