CVE-2026-102483

CVSS 7.5 (high) · published 2026-10-21

Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields.

Weakness: CWE-617

Source: NVD CVE-2026-102483

References

• https://gitlab.com/NTPsec/ntpsec/-/commit/df83f3c4f
• https://gitlab.com/NTPsec/ntpsec/-/work_items/899

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.