{"schema":"vulnpedia.research/1","cve":"CVE-2026-103006","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://discuss.elastic.co/t/elasticsearch-8-19-21-9-4-6-9-5-2-security-update-esa-2026-196/390870","tags":["Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"elastic","modified":"2026-10-06T19:31:49.222Z","origins":[{"source":"mitre","sourceId":"elastic","modified":"2026-10-06T19:31:49.222Z","url":"https://discuss.elastic.co/t/elasticsearch-8-19-21-9-4-6-9-5-2-security-update-esa-2026-196/390870"},{"source":"nvd","sourceId":"CVE-2026-103006","modified":"2026-10-09T13:26:04.043","url":"https://discuss.elastic.co/t/elasticsearch-8-19-21-9-4-6-9-5-2-security-update-esa-2026-196/390870"},{"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","url":"https://discuss.elastic.co/t/elasticsearch-8-19-21-9-4-6-9-5-2-security-update-esa-2026-196/390870"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103006.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103006.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-103006","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-103006"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547125","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547125"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-103006","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-103006"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103006","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103006"}]},{"source":"euvd","sourceId":"EUVD-2026-93936","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93936","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-93936","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93936"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103006.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9","product":"rhoai/odh-feature-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-feature-server-rhel9?repository_url=registry.redhat.io/rhoai/odh-feature-server-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103006.json"}]},{"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103006.json","productId":"red_hat_quay_3:quay/quay-rhel8","product":"quay/quay-rhel8 as a component of Red Hat Quay 3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/quay-rhel8?repository_url=registry.redhat.io/quay/quay-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103006.json"}]},{"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103006.json","productId":"red_hat_quay_3:quay/quay-rhel9","product":"quay/quay-rhel9 as a component of Red Hat Quay 3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/quay-rhel9?repository_url=registry.redhat.io/quay/quay-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-103006","modified":"2026-10-08T11:35:45+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103006.json"}]}],"vendorCoverage":{"total":3,"shown":3,"omitted":0,"source":"redhat"}}