OP
Vendor
openGauss-server
6
CVEs
0
On KEV
4
New 30D
Products
OP8.1
openGauss-server
openGauss-server
3 CVEs0 on KEV3 new
OP7.0
openGauss-connector-jdbc
openGauss-server
1 CVEs0 on KEV1 new
OP5.9
openGauss-server-7.0.0-RC1
openGauss-server
1 CVEs0 on KEV0 new
OP5.9
openGauss-server-7.0.0-RC2
openGauss-server
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111438 | OP openGauss-server openGauss-server | 6.5 | Oct 19 | check_hba_replication 认证与访问控制绕过 |
| CVE-2026-111439 | OP openGauss-server openGauss-server | 4.3 | Oct 19 | pg_read_binary_file_blocks 缺少初始用户权限校验，普通用户可读取 relation 文件块 |
| CVE-2026-111440 | OP openGauss-connector-jdbc openGauss-server | 7.0 | Oct 19 | JDBC LogFactory 任意类加载/构造导致潜在 RCE |
| CVE-2026-111441 | OP openGauss-server openGauss-server | 8.1 | Oct 19 | HLL 反序列化 lenTotal/lenUsed 校验缺失导致堆越界写 |
| CVE-2026-14178 | OP openGauss-server-7.0.0-RC2 openGauss-server | 5.9 | Jun 30 | openGauss存在非法内存访问导致DoS漏洞 |