openGauss-server
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| openGauss-server | 3 | – | Oct 19, 2026 |
| openGauss-connector-jdbc | 1 | – | Oct 19, 2026 |
| openGauss-server-7.0.0-RC1 | 1 | – | Jun 30, 2026 |
| openGauss-server-7.0.0-RC2 | 1 | – | Jun 30, 2026 |
| openGauss-server-7.0.0-RC3 | 1 | – | Jun 30, 2026 |
Exploited and recent CVEs
- CVE-2026-111438 check_hba_replication 认证与访问控制绕过 0.4%
- CVE-2026-111439 pg_read_binary_file_blocks 缺少初始用户权限校验，普通用户可读取 relation 文件块 0.3%
- CVE-2026-111440 JDBC LogFactory 任意类加载/构造导致潜在 RCE 0.2%
- CVE-2026-111441 HLL 反序列化 lenTotal/lenUsed 校验缺失导致堆越界写 0.4%
- CVE-2026-14178 openGauss存在非法内存访问导致DoS漏洞 0.4%
- CVE-2026-14178 openGauss存在非法内存访问导致DoS漏洞 0.4%
- CVE-2026-14178 openGauss存在非法内存访问导致DoS漏洞 0.4%