CVE-2026-102483High· 7.5▾ TwilightReachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 23.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.6%
Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields.
ntpsec >= 1.1.4 < 1.2.6Upgrade to version 1.2.6
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-102485Medium· 5.2Out-of-bounds Read in ntpsec
CVE-2026-102484Medium· 6.4Heap-based Buffer Overflow in ntpsec
CVE-2026-102486High· 7.5Out-of-bounds Read in ntpsec
CVE-2025-12131Medium· 6.5A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service.
CVE-2023-38469Medium· 6.2Reachable assertion in avahi_dns_packet_append_record
CVE-2023-38470Medium· 6.2Reachable assertion in avahi_escape_label