Live › vulnerability › CVE-2026-102483
Go to dashboardNTPsec ntpd versions 1.1.4 through 1.2.5 contain a reachable exit triggered by an NTS request carrying excess NTS Cookie Placeholder extension fields. A remote attacker can use this to stop the time daemon.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Servers running NTPsec ntpd between 1.1.4 and 1.2.5 that accept NTS requests from the network are exposed, because the flaw is triggered by a remote NTS request. Systems that run other NTP implementations, or NTPsec outside this version range, are not covered by this entry.
No product ranges from the sources yet.
ntpd --version or ntpq -c version to read the installed NTPsec version.1.2.5; the first fixed version is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields.
This page as .md · .json · in your agent: get_signal("CVE-2026-102483")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.