Browse all 5 CVE security advisories affecting openGauss-server. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-111438 | check_hba_replication 认证与访问控制绕过 — openGauss-server CWE-288 | 6.5 | Medium | 2026-10-19 |
| CVE-2026-111439 | pg_read_binary_file_blocks 缺少初始用户权限校验，普通用户可读取 relation 文件块 — openGauss-server CWE-862 | 4.3 | Medium | 2026-10-19 |
| CVE-2026-111440 | JDBC LogFactory 任意类加载/构造导致潜在 RCE — openGauss-connector-jdbc CWE-470 | 7.0 | High | 2026-10-19 |
| CVE-2026-111441 | HLL 反序列化 lenTotal/lenUsed 校验缺失导致堆越界写 — openGauss-server CWE-122 | 8.1 | High | 2026-10-19 |
| CVE-2026-14178 | openGauss存在非法内存访问导致DoS漏洞 — openGauss-server-7.0.0-RC2 CWE-416 | 5.9 | Medium | 2026-06-30 |
This page lists every published CVE security advisory associated with openGauss-server. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.