{"schema":"vulnpedia.research/1","cve":"CVE-2026-102411","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://discuss.elastic.co/t/elasticsearch-9-4-7-9-5-3-8-19-23-security-update-esa-2026-192/390865","tags":["Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"elastic","modified":"2026-10-06T19:31:43.529Z","origins":[{"source":"mitre","sourceId":"elastic","modified":"2026-10-06T19:31:43.529Z","url":"https://discuss.elastic.co/t/elasticsearch-9-4-7-9-5-3-8-19-23-security-update-esa-2026-192/390865"},{"source":"nvd","sourceId":"CVE-2026-102411","modified":"2026-10-09T15:49:36.110","url":"https://discuss.elastic.co/t/elasticsearch-9-4-7-9-5-3-8-19-23-security-update-esa-2026-192/390865"},{"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","url":"https://discuss.elastic.co/t/elasticsearch-9-4-7-9-5-3-8-19-23-security-update-esa-2026-192/390865"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102411.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102411.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-102411","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-102411"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547102","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547102"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-102411","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-102411"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102411","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102411"}]},{"source":"euvd","sourceId":"EUVD-2026-93932","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93932","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-93932","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93932"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102411.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9","product":"rhoai/odh-feature-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. The upstream Elastic advisory states that there are no workarounds for this vulnerability and that the issue is resolved in Elasticsearch 9.4.7, 9.5.3, and 8.19.23; Elastic recommends upgrading to the most recent release available."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-feature-server-rhel9?repository_url=registry.redhat.io/rhoai/odh-feature-server-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102411.json"}]},{"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102411.json","productId":"red_hat_quay_3:quay/quay-rhel8","product":"quay/quay-rhel8 as a component of Red Hat Quay 3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/quay-rhel8?repository_url=registry.redhat.io/quay/quay-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102411.json"}]},{"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102411.json","productId":"red_hat_quay_3:quay/quay-rhel9","product":"quay/quay-rhel9 as a component of Red Hat Quay 3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/quay-rhel9?repository_url=registry.redhat.io/quay/quay-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-102411","modified":"2026-10-21T16:10:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102411.json"}]}],"vendorCoverage":{"total":3,"shown":3,"omitted":0,"source":"redhat"}}