ZeroDay Findings
Sign inSign up

Findings

CVE-2026-73198

A flaw was found in FreeIPA.

Published Aug 20, 2026 · updated Oct 15, 2026 · Red Hat Red Hat Enterprise Linux 10

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial of service (DoS) condition.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 20, 2026 · NIST NVD

    Detected

    A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial of service (DoS) condition.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial of service (DoS) condition.

  3. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial of service (DoS) condition.

  4. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial of service (DoS) condition.

  5. Oct 15, 2026 · NIST NVD

    Updated

    A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial of service (DoS) condition.

Affected

  • cpe freeipa/freeipaversion unspecified
  • cpe redhat/enterprise linux10.0
  • cpe redhat/enterprise linux6.0
  • cpe redhat/enterprise linux7.0
  • cpe redhat/enterprise linux8.0
  • cpe redhat/enterprise linux9.0
  • vendor Red Hat Red Hat Enterprise Linux 10version unspecified
  • vendor Red Hat Red Hat Enterprise Linux 10.0 Extended Update Supportversion unspecified
  • vendor Red Hat Red Hat Enterprise Linux 6version unspecified
  • vendor Red Hat Red Hat Enterprise Linux 7version unspecified
  • vendor Red Hat Red Hat Enterprise Linux 8version unspecified
  • vendor Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceversion unspecified
  • vendor Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsversion unspecified
  • vendor Red Hat Red Hat Enterprise Linux 9version unspecified
  • vendor Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsversion unspecified
  • vendor Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsversion unspecified
  • vendor Red Hat Red Hat Enterprise Linux 9.6 Extended Update Supportversion unspecified

Sources

  • CIRCL Vulnerability LookupCVE-2026-73198

    A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial of

    vulnerability.circl.lu
  • CVE.orgCVE-2026-73198

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-73198

    30-day exploitation probability 0.4%

    first.org
  • NIST NVDCVE-2026-73198

    A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsive

    nvd.nist.gov

References

CVE-2026-73198 · ZeroDay Findings