AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-73198

Red Hat FreeIPA. A remote: resource exhaustion

Red Hat

CVE-2026-73198 · Published Aug 20, 2026 · updated Nov 5, 2026

High7.5
No fix yet
Red Hat advisory

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18n_messages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial of service (DoS) condition.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-770

More Red Hat advisories

All Red Hat
High 7.7Aug 20Red Hat multicloud-operators-subscription: information disclosureCVE-2026-73137no fix yetCritical 9.9Aug 20A flaw was found in the multicloud-operators-subscription componentCVE-2026-67567no fix yetLow 2.5Aug 20Red Hat Advanced Cluster Management for Kubernetes 2: information disclosureCVE-2026-66785no fix yetMedium 5.4Aug 20Red Hat lighthouse: information disclosureCVE-2026-66787no fix yetLow 3.7Aug 20Red Hat Lighthouse. A remote attacker: privilege escalationCVE-2026-66788no fix yetHigh 8.1Aug 20A flaw was found in Kata ContainersCVE-2026-77176no fix yet