CVE-2026-73197 — Vulnerability intelligence

redhat — enterprise linux

Published: 2026-08-20T10:31:31.674Z

CVSS

7.5

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.

Sources

• CVE-2026-73197
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Vendor Advisory
• Issue Tracking, Vendor Advisory
• CVE-2026-73197