Out-of-bounds Read Vulnerability in NTPsec Daemon Affects Multiple Versions
CVE-2026-102486

7.5HIGH

Key Information:

Vendor

Ntpsec

Status
Ntpsec
Vendor
CVE Published:
21 October 2026

What is CVE-2026-102486?

An out-of-bounds read vulnerability exists in the NTS extension field parsing of NTPsec's ntpd versions from 1.1.4 to 1.2.5. This flaw allows a remote attacker to potentially crash the daemon by exploiting the NTS Authenticator and Encrypted Extension Fields (AEEF) with an oversized nonce length. This situation could lead to service disruptions and compromise the integrity of time-stamping services.

Affected Version(s)

ntpsec 1.1.4 < 1.2.6

References

https://gitlab.com/NTPsec/ntpsec/-/work_items/891
https://gitlab.com/NTPsec/ntpsec/-/work_items/895
https://gitlab.com/NTPsec/ntpsec/-/commit/7cc079387

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

afldl; Tristan Madani; Kimi Security Team <bug-report@moonshot.ai>
.