High severity7.5NVD Advisory· Published Oct 21, 2026
CVE-2026-102486
CVE-2026-102486
Description
Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and Encrypted Extension Fields (AEEF) field with an oversized nonce length.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.