{"schema":"vulnpedia.research/1","cve":"CVE-2026-102409","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://discuss.elastic.co/t/elasticsearch-9-4-8-9-5-5-security-update-esa-2026-190/390863","tags":["Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"elastic","modified":"2026-10-06T19:31:40.592Z","origins":[{"source":"mitre","sourceId":"elastic","modified":"2026-10-06T19:31:40.592Z","url":"https://discuss.elastic.co/t/elasticsearch-9-4-8-9-5-5-security-update-esa-2026-190/390863"},{"source":"nvd","sourceId":"CVE-2026-102409","modified":"2026-10-13T18:40:20.810","url":"https://discuss.elastic.co/t/elasticsearch-9-4-8-9-5-5-security-update-esa-2026-190/390863"},{"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","url":"https://discuss.elastic.co/t/elasticsearch-9-4-8-9-5-5-security-update-esa-2026-190/390863"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102409.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102409.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-102409","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-102409"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547105","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547105"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-102409","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-102409"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102409","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102409"}]},{"source":"euvd","sourceId":"EUVD-2026-93930","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93930","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-93930","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93930"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102409.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9","product":"rhoai/odh-feature-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-feature-server-rhel9?repository_url=registry.redhat.io/rhoai/odh-feature-server-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102409.json"}]},{"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102409.json","productId":"red_hat_quay_3:quay/quay-rhel8","product":"quay/quay-rhel8 as a component of Red Hat Quay 3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/quay-rhel8?repository_url=registry.redhat.io/quay/quay-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102409.json"}]},{"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102409.json","productId":"red_hat_quay_3:quay/quay-rhel9","product":"quay/quay-rhel9 as a component of Red Hat Quay 3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/quay-rhel9?repository_url=registry.redhat.io/quay/quay-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-102409","modified":"2026-10-08T12:02:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102409.json"}]}],"vendorCoverage":{"total":3,"shown":3,"omitted":0,"source":"redhat"}}