ncp firmware vulnerabilities and fixes

Recent CVEs affecting ncp firmware, with upgrade or downgrade steps. 1 tracked.

Also searched as: ncpfirmware.

ncp firmware has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-02-24. Highest priority: CVE-2025-14577 (score 49/100).

• CVE-2025-14577 CRITICAL 9.8 UPGRADE UPGRADE Slican NCP/IPL/IPM/IPU devices are vulnerable to PHP Function Injection

FAQ

How do I fix ncp firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ncp firmware being exploited right now?

None of the tracked ncp firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ncp firmware CVE should I patch first?

CVE-2025-14577 currently ranks highest (49/100): Slican NCP/IPL/IPM/IPU devices are vulnerable to PHP Function Injection.

← Back to latest CVEs