CVE-2026-88778

highpriority · track · 40EPSS 0.004 · 31 %ileexploit · PoCDENLUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

0.38% (31st) EPSS

CVSS 7.5 · high

Is it mine?

22 products

Check your exposure

Who says so?

3 sources

cert_bund · ncsc_nl · nvd

EPSS · scored 2026-10-24

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23.

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · NCSC-NL NL

v4.08.8highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary

v4.07.8highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-342USCWE-342US

exploits (1)

Public proof-of-concept and weaponised exploit code.

CompleTetech-Security/netscaler-cve-2026-88778-checkStandalone defensive checker project for CVE-2026-88778: Citrix NetScaler ADC / Gateway: Predictable TCP initial sequence numbers. One exploit per repository; implementation pending.PoC · poc_in_github

affected products (22)

Products and version ranges known to be affected.

Citrix Systems NetScaler ADC <13.1-64.23all versionscert_bundDE
Citrix Systems NetScaler ADC <14.1-73.37all versionscert_bundDE
Citrix Systems NetScaler ADC FIPS <13.1-37.279all versionscert_bundDE
Citrix Systems NetScaler ADC FIPS <14.1-73.37all versionscert_bundDE
Citrix Systems NetScaler ADC NDcPP <13.1-37.279all versionscert_bundDE
Citrix Systems NetScaler Gateway <13.1-64.23all versionscert_bundDE
Citrix Systems NetScaler Gateway <14.1-73.37all versionscert_bundDE
Citrix Systems NetScaler≤ ADC NDcPP <13.1-37.279cert_bundDE
Citrix Systems NetScaler≤ ADC <13.1-64.23cert_bundDE
Citrix Systems NetScaler≤ ADC <14.1-73.37cert_bundDE
Citrix Systems NetScaler≤ ADC FIPS <13.1-37.279cert_bundDE
Citrix Systems NetScaler≤ ADC FIPS <14.1-73.37cert_bundDE
Citrix Systems NetScaler≤ Gateway <13.1-64.23cert_bundDE
Citrix Systems NetScaler≤ Gateway <14.1-73.37cert_bundDE
Citrix NetScaler ADC≤ vers:unknown/*ncsc_nlNL
Citrix NetScaler Gateway≤ vers:unknown/*ncsc_nlNL
citrix netscaler application delivery controller13.1 → 13.1-64.23nvdUScpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:*:*:*:*
citrix netscaler application delivery controller13.1 → 13.1.37.279nvdUScpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:*:*:*:*
citrix netscaler application delivery controller14.1 → 14.1-73.37nvdUScpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:*:*:*:*
citrix netscaler application delivery controller14.1-66.68 → 14.1-73.37nvdUScpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:*:*:*:*

showing 20 of 22

advisories (2)

Vendor and ecosystem advisories describing this.

NCSC-2026-0394Kwetsbaarheden verholpen in NetScaler ADC en NetScaler GatewayNL2026-09-27csaf · ncsc_nlNL
Citrix heeft 8 kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway. De volgende ondersteunde versies van Citrix NetScaler ADC en Citrix NetScaler Gateway zijn kwetsbaar: - Citrix NetScaler ADC en Citrix NetScaler Gateway 14.1 vóór versie 14.1-73.37 - Citrix NetScaler ADC en Citrix NetScaler Gateway 13.1 vóór versie 13.1-64.23 - Citrix NetScaler ADC FIPS vóór versie 14.1-73.37 FIPS - Citrix NetScaler ADC FIPS en NDcPP vóór versie 13.1-37.279 Secure Private Access Hybrid-implementaties die gebruikmaken van NetScaler-instances zijn ook kwetsbaar voor deze kwetsbaarheden. Deze advisory is uitsluitend van toepassing op door klanten beheerde Citrix NetScaler ADC-systemen (“NetScaler ADC”) en Citrix NetScaler Gateway-systemen (“NetScaler Gateway”). Cloud Software Group voorziet de door Citrix beheerde clouddiensten en Citrix Managed Adaptive Authentication van de benodigde software-updates.
WID-SEC-W-2026-3587Citrix NetScaler ADC und Citrix NetScaler Gateway: Mehrere SchwachstellenDeutsch2026-09-27csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Citrix NetScaler ADC und Citrix NetScaler Gateway ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand auszulösen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und weitere, nicht näher bezeichnete Auswirkungen zu erzielen.

sources

Which sources assert this record, and when.

cert_bund ncsc_nl nvd NVD CVE.org MITRE

published 2026-09-27modified 2026-09-29

references (1) nvd

External citations — patches, advisories, analysis.

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096Vendor Advisory

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan