This module exploits CVE-2026-88772, a memory overflow vulnerability present in the DTLS parser of the NSPPE executable of Citrix NetScaler ADC and Gateway to cause a Denial of Service. The module will exploit the vulnerability by connecting to the UDP socket of the Gateway, establish a proper DTLS state for the target to accept later handshake traffic and finally crash the NSPPE executable by sending 120 handshake records that will make the DTLS parser of the executable mishandle the reassembly/state and lead to a crash, causing a warm restart. The module will check if the denial of service was successful after 10 seconds.
CVE Link
Exploit Platform
Exploit Type
Product Name