Citrix NetScaler DTLS Exploitation Probing (CVE-2026-88772)

Ibrahim Saud@tektrix

•updated Sep 28, 2026•14•0•24

Detects high-frequency, short-duration UDP flow activity on NetScaler VPN ports (443/4433) indicative of volumetric or malformed DTLS handshake probing, potentially associated with exploitation attempts like CVE-2026-88772.