Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

(A flaw was found in FreeIPA. A low-privilege authenticated user can ex ...)

CVE-2026-73196 is a resource exhaustion vulnerability in FreeIPA where a low-privilege authenticated user can submit an oversized OTP key value. The vulnerable code decodes and re-encodes this OTP key without enforcing size limits, causing excessive CPU and memory usage. This can lead to denial of service by degrading the availability of the IPA service. The weakness is classified under CWE-770 (Allocation of Resources Without Limits or Throttling). No known exploits in the wild have been reported. The vulnerability affects FreeIPA but no specific affected versions are stated in the input data. Red Hat's advisory recommends mitigation by enforcing conservative HTTP request-body size limits on the /ipa/session/json endpoint and restricting token creation to trusted users where feasible.

Detailed information about A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Pa

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password (OTP)… (CVE-2026-73196) - Live Threat Intelligence - Threat Radar | OffSeq.com

(A flaw was found in FreeIPA. A low-privilege authenticated user can ex ...) (CVE-2026-73196)

CVE-2026-73196 is a vulnerability in FreeIPA on Red Hat Enterprise Linux 10 where a low-privilege authenticated user can submit an oversized One-Time Password (OTP) key. This oversized key is decoded and re-encoded without size limits, causing excessive CPU and memory consumption that can degrade the availability of the IPA service, resulting in a denial of service.

This vulnerability involves improper resource allocation handling in FreeIPA's OTP token processing. A low-privilege authenticated user can exploit this by submitting an oversized OTP key value to the `/ipa/session/json` endpoint. The key is decoded and re-encoded without enforcing size limits, leading to excessive CPU and memory usage. This resource exhaustion can cause a denial of service, impacting the availability of the IPA service. The issue is tracked as CVE-2026-73196 and has a CVSS v3.1 base score of 4.3 (medium severity) as scored by Red Hat. The vendor advisory recommends enforcing conservative HTTP request-body size limits on the affected endpoint and restricting token creation to trusted users where feasible.

Detailed information about CVE-2026-73196: Allocation of Resources Without Limits or Throttling in Red Hat Red Hat Enterprise Linux 10 affecting Red Hat Red Hat

CVE-2026-73196: Allocation of Resources Without Limits or Throttling in Red Hat Red Hat Enterprise Linux 10 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-73196: Allocation of Resources Without Limits or Throttling in Red Hat Red Hat Enterprise Linux 10


(A flaw was found in FreeIPA. A low-privilege authenticated user can ex ...) (CVE-2026-73196)CVE-2026-73196 0 (A flaw was found in FreeIPA. A low-privilege authenticated user can ex ...) MediumVulnerability#gcve #osv #ghsa-rvf3-5qrx-mrj3 Join the discussion	GCVE Database	08/21/2026, 00:00:00 UTC Added: 08/20/2026, 14:08:14 UTC
CVE-2026-73196: Allocation of Resources Without Limits or Throttling in Red Hat Red Hat Enterprise Linux 10CVE-2026-73196 0 CVE-2026-73196 is a vulnerability in FreeIPA on Red Hat Enterprise Linux 10 where a low-privilege authenticated user can submit an oversized One-Time Password (OTP) key. This oversized key is decoded and re-encoded without size limits, causing excessive CPU and memory consumption that can degrade the availability of the IPA service, resulting in a denial of service. MediumVulnerability#cve #cve-2026-73196 Join the discussion	CVE Database V5	08/20/2026, 10:31:58 UTC Added: 08/20/2026, 11:11:47 UTC

Threats Tagged 'cve-2026-73196'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-73196'

Lead Pen Test Professional