Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-88772 — Python PoC for CVE-2026-88772 that fingerprints Citrix NetScaler ADC/Gateway, compares build versions to fixed releases, and probes UDP/443 DTLS exposure. | Kitploit
Tools/GitHubGitHub/murrez/cve-2026-88772
ReconnaissanceVulnerability ScannersVulnerability AnalysisExploitationNetwork Security
GitHubmurrez/cve-2026-88772

CVE-2026-88772

Python PoC for CVE-2026-88772 that fingerprints Citrix NetScaler ADC/Gateway, compares build versions to fixed releases, and probes UDP/443 DTLS exposure.

View Repository
122117 days agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-88772 — Citrix NetScaler DTLS memory overflow

Python 3 PoC for CVE-2026-88772 — Citrix NetScaler ADC and NetScaler Gateway.

Description (PoCbit / GitHub)

CVE-2026-88772 — Memory overflow on DTLS (UDP TLS) handling can lead to remote code execution or denial of service. Exploitation requires DTLS to be enabled; on Gateway, DTLS is on by default for VPN virtual servers unless an administrator set -dtls OFF. DTLS-type vServers are also in scope.

Affected (fix thresholds):

ProductFixed
ADC / Gateway 14.114.1-73.37 and later
ADC / Gateway 13.113.1-64.23 and later
ADC 14.1 FIPS14.1-73.37 FIPS
ADC 13.1 FIPS / NDcPP13.1.37.279

CVSS 4.0: 9.5 CRITICAL (AV:N/AC:H/PR:N/UI:N, high C/I/A and subscores).

Citrix CTX697096 (with CVE-2026-88771 through 88778) states active exploitation of 88771 and 88772 on unmitigated appliances. Prior August builds (14.1-73.32, 13.1-63.21) do not fix this issue.

PoC page: https://pocbit.org/pocs/cve-2026-88772

PoCbit

Catalog: https://pocbit.org/pocs/

VendorCitrix / Cloud Software Group
ProductsNetScaler ADC, NetScaler Gateway
VectorNetwork, DTLS (typically UDP 443)
ImpactRCE or DoS
MitigationPatch; or disable DTLS on VPN vServer

This PoC fingerprints Gateway/ADC login surfaces, parses build strings when exposed, checks UDP/443, and optionally sends a benign DTLS ClientHello probe. It does not include the memory overflow trigger (weaponized in the wild).

Usage

pip install -r requirements.txt

python poc.py -u https://vpn.example.com --mode check
python poc.py -u https://vpn.example.com --mode check --dtls-probe
python poc.py -u https://vpn.example.com --build 14.1-73.32 --mode check
python poc.py --list targets.example.txt --mode check -j 12

GitHub About (EN)

CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS). Detects Gateway, build vs 14.1-73.37 / 13.1-64.23, UDP/443 DTLS probe. PoCbit

Özet (TR)

CVE-2026-88772: NetScaler’da DTLS bellek taşması; varsayılan VPN DTLS ile RCE/DoS. Sıfır gün sömürüsü bildirildi. PoC: tespit + güvenli DTLS probe; overflow paketi yok.

Legal

Authorized testing and incident response only. Do not crash production appliances.

Download Tool