HIGH 7.5 NVD

CVE-2026-73197

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/mi

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.

References

https://access.redhat.com/security/cve/CVE-2026-73197
https://bugzilla.redhat.com/show_bug.cgi?id=2474697

Published: 2026-08-20 · Source: NVD · Feed updated: 2026-08-20

This high severity vulnerability with a CVSS score of 7.5 was published on 2026-08-20 via NVD.

vulnfeed aggregates 11672 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.