{"schema":"vulnpedia.research/1","cve":"CVE-2026-102404","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-185/390859","tags":["Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"elastic","modified":"2026-10-06T19:31:34.716Z","origins":[{"source":"mitre","sourceId":"elastic","modified":"2026-10-06T19:31:34.716Z","url":"https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-185/390859"},{"source":"nvd","sourceId":"CVE-2026-102404","modified":"2026-10-13T18:50:46.900","url":"https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-185/390859"},{"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","url":"https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-185/390859"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102404.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102404.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-102404","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-102404"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547107","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547107"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-102404","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-102404"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102404","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102404"}]},{"source":"euvd","sourceId":"EUVD-2026-93926","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93926","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-93926","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93926"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102404.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9","product":"rhoai/odh-feature-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network exposure by limiting access to the Elasticsearch service to trusted internal networks and authorized hosts using host-level firewalling or container network policies.\n\nOn hosts utilizing firewalld, restrict traffic on the service port (TCP port 9200) to trusted IP addresses:\n\nfirewall-cmd --permanent --zone=trusted --add-source=<TRUSTED_IP_OR_CIDR>\nfirewall-cmd --permanent --remove-port=9200/tcp\nfirewall-cmd --reload\n\nIn OpenShift or Kubernetes environments, apply NetworkPolicies to restrict ingress traffic to the Elasticsearch pods, permitting communication only from trusted application namespaces. Additionally, restrict query execution privileges using role-based access control so that untrusted accounts cannot execute arbitrary queries.\n\nCaveats: Network filtering and access restrictions prevent untrusted network actors from submitting queries, but authenticated trusted accounts can still trigger the vulnerability. Reloading firewall rules or applying network policies may cause brief connection drops for active sessions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-feature-server-rhel9?repository_url=registry.redhat.io/rhoai/odh-feature-server-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102404.json"}]},{"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102404.json","productId":"red_hat_quay_3:quay/quay-rhel8","product":"quay/quay-rhel8 as a component of Red Hat Quay 3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/quay-rhel8?repository_url=registry.redhat.io/quay/quay-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102404.json"}]},{"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102404.json","productId":"red_hat_quay_3:quay/quay-rhel9","product":"quay/quay-rhel9 as a component of Red Hat Quay 3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/quay-rhel9?repository_url=registry.redhat.io/quay/quay-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-102404","modified":"2026-10-08T06:17:49+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102404.json"}]}],"vendorCoverage":{"total":3,"shown":3,"omitted":0,"source":"redhat"}}