Ntpd-Rs · Ntpd-Rs · CVE-2026-26076
**Name of the Vulnerable Software and Affected Versions**
ntpd-rs versions prior to 1.7.1
**Description**
ntpd-rs is a full-featured implementation of the Network Time Protocol. An attacker can remotely cause moderate increases in CPU usage (2-4 times above normal). When Network Time System (NTS) is enabled on an ntpd-rs server, an attacker can create malformed NTS packets that require significantly more server effort to respond to by requesting a large number of cookies. This can lead to degraded server performance.
**Recommendations**
Update to version 1.7.1 or later.