CVE-2026-19735: Use of Insufficiently Random Values

The RFC 6528 initial-sequence-number implementation in subsys/net/ip/tcp.c derived every TCP ISN from SHA-256uniquekey || four-tuple plus a uptime-derived offset, where uniquekey is a 128-bit secret filled once by syscsrandget. The return value of that call was discarded and the once guard was...

CVE-2026-88778 TCP Initial Sequence Number (ISN) prediction

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100760 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Reco...

AZL-90642 CVE-2026-53249 affecting package kernel for versions less than 6.6.143.1-1

In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Record Route LSRR and Strict Source and Record Route SSRR IP options to users with CAPNETRAW capability. This prevents unprivileged...

EUVD-2020-20142

Malware in sbrugna...

EUVD-2020-20137

Malware in sbrugna...

EUVD-2024-32906

Malicious code in bioql PyPI...

EUVD-2021-32254

Malicious code in bioql PyPI...

CVE-2024-10604

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances...

CVE-2024-10604

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances...

CVE-2024-10604: Use of Insufficiently Random Values

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances...

CVE-2023-45236: Exposure of Sensitive Information to an Unauthorized Actor

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality...

CVE-2023-45237: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality...

CVE-2020-27631

In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random...

CVE-2021-45488

The CVE-2021-45488 issue affects NetBSD up to 9.2, involving an information leak in the TCP ISN (ISS) generation algorithm within the IP/TCP stack. The root cause is an information disclosure flaw in how ISNs are generated, enabling partial exposure of sensitive data. Publicly documented details ...

CVE-2021-45488

In NetBSD through 9.2, there is an information leak in the TCP ISN ISS generation algorithm...

CVE-2021-45488: Use of Insufficiently Random Values

In NetBSD through 9.2, there is an information leak in the TCP ISN ISS generation algorithm...

PT-2021-2223 · Unknown · Ethernut Nut/Os

Name of the Vulnerable Software and Affected Versions: Ethernut Nut/OS version 5.1 Description: An issue was discovered in the code that generates Initial Sequence Numbers ISNs for TCP connections, deriving the ISN from an insufficiently random source. This allows an attacker to determine the ISN...

CVE-2018-7356

All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number ISN reuse vulnerability, which can generate easily predictable ISN, and allows remote attackers to spoof connections...

CVE-2018-7356: Authentication Bypass by Capture-replay

All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number ISN reuse vulnerability, which can generate easily predictable ISN, and allows remote attackers to spoof connections...