CVE-2026-88778: TCP Initial Sequence Number (ISN) prediction
Published Sep 27, 2026
·Updated
Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23.
Affected Software
2 affected components
Citrix NetScaler ADC<14.1-73.37, <13.1-64.23, <13.1.37.279
Citrix NetScaler Gateway<14.1-73.37, <13.1-64.23
Event History
Sep 27, 2026
CVE Published
via MITRE·04:43 PM
Data Sourced
via MITRE·04:43 PM
DescriptionWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which product versions need to be updated?
Citrix NetScaler ADC is affected before 14.1-73.37 and 13.1-64.23. ADC FIPS is affected before 14.1-73.37 FIPS, while ADC 13.1 FIPS and NDcPP is affected before 13.1.37.279; NetScaler Gateway is affected before 14.1-73.37 and 13.1-64.23.