CVE Tools
Track your stack

Secure Client

16 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Secure Client, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Secure Client CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Secure Client CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-020
2025-031
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-100

Severity

How the 16 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • High638%
  • Medium744%
  • Low319%

Latest CVEs

The 15 most recently published vulnerabilities affecting Secure Client.

  1. CVE-2025-20206Cisco Secure Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability7.1
  2. CVE-2024-20474A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Sec...4.3
  3. CVE-2024-20391A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM....6.8
  4. CVE-2024-3661DHCP routing options can manipulate interface-based VPN traffic7.6
  5. CVE-2024-20337A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacker to conduct a carriage return line feed (CRLF) injection attack against a us...8.2
  6. CVE-2024-20338A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerabil...7.3
  7. CVE-2023-20241Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an...5.5
  8. CVE-2023-20240Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an...5.5
  9. CVE-2023-20178A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated...7.8
  10. CVE-2010-5203Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client - Juniper Edition before 9.23 Build ...6.9
  11. CVE-2006-3551NCP Secure Enterprise Client (aka VPN/PKI client) 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound ne...1.2
  12. CVE-2006-0964Client Firewall in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass firewall program execution rules by replacing an allowed program...4.6
  13. CVE-2006-0967NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service (memory usage and cpu utilization) via a flood of arbitrary UDP ...2.1
  14. CVE-2006-0965NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass security protections and configure privileged options via a long argument to ncpmon...4.6
  15. CVE-2006-0966NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service (CPU consumption) via a large number of arguments to ncprwsnt.ex...2.1

Product grouping is registry-driven, with AI assist and human review. How it works