{"schema":"vulnpedia.research/1","cve":"CVE-2026-103009","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-199/390874","tags":["Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"elastic","modified":"2026-10-06T19:31:53.261Z","origins":[{"source":"mitre","sourceId":"elastic","modified":"2026-10-06T19:31:53.261Z","url":"https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-199/390874"},{"source":"nvd","sourceId":"CVE-2026-103009","modified":"2026-10-09T13:13:05.053","url":"https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-199/390874"},{"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","url":"https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-199/390874"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103009.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103009.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-103009","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-103009"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547106","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547106"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-103009","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-103009"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103009","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103009"}]},{"source":"euvd","sourceId":"EUVD-2026-93939","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93939","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-93939","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93939"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103009.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9","product":"rhoai/odh-feature-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-feature-server-rhel9?repository_url=registry.redhat.io/rhoai/odh-feature-server-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103009.json"}]},{"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103009.json","productId":"red_hat_quay_3:quay/quay-rhel8","product":"quay/quay-rhel8 as a component of Red Hat Quay 3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/quay-rhel8?repository_url=registry.redhat.io/quay/quay-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103009.json"}]},{"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103009.json","productId":"red_hat_quay_3:quay/quay-rhel9","product":"quay/quay-rhel9 as a component of Red Hat Quay 3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/quay-rhel9?repository_url=registry.redhat.io/quay/quay-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-103009","modified":"2026-10-08T11:34:57+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103009.json"}]}],"vendorCoverage":{"total":3,"shown":3,"omitted":0,"source":"redhat"}}