CVE-2026-102483: Reachable Assertion in ntpsec

Q: Which deployments are exposed?

NTPsec ntpd versions 1.1.4 through 1.2.5 are affected. The issue is remotely reachable over the network and does not require attacker privileges or user interaction.

Q: What must an attacker send to trigger the denial of service?

An attacker must send an NTS request containing an excessive number of NTS Cookie Placeholder extension fields. Successful exploitation terminates the ntpd daemon.

Published Oct 21, 2026

Updated

Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields.

Affected Software

1 affected component

NTPsec ntpd>=1.1.4<=1.2.5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ntpsec/ntpd to a version that resolves this vulnerability.
Fixed in 1.2.6

Event History

Oct 21, 2026

CVE Published

via MITRE·03:03 PM

Data Sourced

via MITRE·03:03 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed?

NTPsec ntpd versions 1.1.4 through 1.2.5 are affected. The issue is remotely reachable over the network and does not require attacker privileges or user interaction.

What must an attacker send to trigger the denial of service?

An attacker must send an NTS request containing an excessive number of NTS Cookie Placeholder extension fields. Successful exploitation terminates the ntpd daemon.

CVE-2026-102483: Reachable Assertion in ntpsec

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are exposed?

What must an attacker send to trigger the denial of service?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What must an attacker send to trigger the denial of service?