Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ntp (UTSA-2023-001601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001601 advisory. mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ntp (UTSA-2023-001599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001599 advisory. mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a client ntpq process, but...

CVE-2026-53581

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.420 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulatin...

CVE-2026-53581 ntp: write path traversal

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.420 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulatin...

CVE-2026-53581 ntp: write path traversal

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.420 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulatin...

EUVD-2026-74293

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.420 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulatin...

CVE-2026-53581

OPNsense is a FreeBSD-based firewall and routing platform. A path traversal vulnerability in the NTP configuration module allows an attacker with access to NTP settings to manipulate the GPS or PPS serial port parameter , escaping the intended directory and forcing the system to write user-contro...

CVE-2026-53581 ntp: write path traversal

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.420 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulatin...

PT-2026-88518

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4 20 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulati...

CVE-2026-63388 affecting package ntp for versions less than 4.2.8p17-3

CVE-2026-63388 affecting package ntp for versions less than 4.2.8p17-3. A patched version of the package is available...

CVE-2026-63384 affecting package ntp for versions less than 4.2.8p17-3

CVE-2026-63384 affecting package ntp for versions less than 4.2.8p17-3. A patched version of the package is available...

CVE-2026-63385 affecting package ntp for versions less than 4.2.8p17-3

CVE-2026-63385 affecting package ntp for versions less than 4.2.8p17-3. A patched version of the package is available...

CVE-2026-63382 affecting package ntp for versions less than 4.2.8p17-3

CVE-2026-63382 affecting package ntp for versions less than 4.2.8p17-3. A patched version of the package is available...

CVE-2026-63383 affecting package ntp for versions less than 4.2.8p17-3

CVE-2026-63383 affecting package ntp for versions less than 4.2.8p17-3. A patched version of the package is available...

CVE-2026-63387 affecting package ntp for versions less than 4.2.8p17-3

CVE-2026-63387 affecting package ntp for versions less than 4.2.8p17-3. A patched version of the package is available...

CVE-2026-63381 affecting package ntp for versions less than 4.2.8p17-3

CVE-2026-63381 affecting package ntp for versions less than 4.2.8p17-3. A patched version of the package is available...

CVE-2026-63379 affecting package ntp for versions less than 4.2.8p17-3

CVE-2026-63379 affecting package ntp for versions less than 4.2.8p17-3. A patched version of the package is available...

CVE-2026-51673

Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter time synchronization settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51673

Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter time synchronization settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83815

Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to alter time synchronization settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...