CVE-2026-111441 (GCVE-0-2026-111441)
Vulnerability from cvelistv5
Published
2026-10-19 02:31
Modified
2026-10-19 17:42
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-122 - Heap-based buffer overflow
Summary
在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与 lenTotal 后，仅检查输入长度足以覆盖 HLL_HEAD_SIZE + lenUsed，随后按 lenTotal 分配缓冲区、按 lenUsed 调用 memcpy_s() 拷贝输入，既未校验 lenTotal >= lenUsed，也将 memcpy_s() 目标大小写成 lenUsed 而非实际分配的 lenTotal，导致安全拷贝无法拦截越界写。hll_in()、hll_print()、hll_cardinality() 等 SQL 入口会走同一解包路径。因此，普通数据库连接用户只需构造 lenTotal 小于 lenUsed 的畸形 packed HLL（例如经 ::hll 进入 hll_in()），即可触发服务端堆越界写，存在内存破坏风险。此问题随 packed HLL 解包函数 HllObjectUnpack() 进入代码，v2.1.0 起即存在。受影响版本包括 2.1.0、3.0.x、3.1.x、5.0.x、5.1.0、6.0.x，以及 7.0.0-RC1、7.0.0-RC2、7.0.0-RC3。该问题已在 7.0.0-LTS 版本修复，通过在 HllObjectUnpack() 中补齐 lenUsed <= lenTotal 校验，并将 memcpy_s() 的目标大小改为实际分配的 lenTotal。修复 PR 见 https://gitcode.com/opengauss/openGauss-server/pull/9380 。
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| openGauss-server | openGauss-server | ||||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-111441",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-19T17:42:18.566832Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T17:42:42.026Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://opengauss.org/zh/download/archive/?version=7.0.0%20(LTS)",
"defaultStatus": "unaffected",
"platforms": [
"openEuler Centos"
],
"product": "openGauss-server",
"vendor": "openGauss-server",
"versions": [
{
"status": "unaffected",
"version": "7.0.0-LTS"
}
]
},
{
"collectionURL": "https://opengauss.org/zh/download/archive/?version=7.0.0-RC3",
"defaultStatus": "unaffected",
"platforms": [
"openEuler Centos"
],
"product": "openGauss-server",
"vendor": "openGauss-server",
"versions": [
{
"status": "affected",
"version": "7.0.0-RC1, 7.0.0-RC2 7.0.0-RC3"
},
{
"status": "affected",
"version": "2.1.0"
},
{
"status": "affected",
"version": "3.0.0-3.0.6"
},
{
"status": "affected",
"version": "3.1.0"
},
{
"status": "affected",
"version": "5.0.0-5.0.5"
},
{
"status": "affected",
"version": "6.0.0-6.0.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u5728 openGauss-server \u7684 src/gausskernel/cbb/utils/hll/hll.cpp \u4e2d\uff0c\u5185\u7f6e\u51fd\u6570 HllObjectUnpack() \u5b58\u5728\u957f\u5ea6\u6821\u9a8c\u7f3a\u9677\u3002\u8be5\u51fd\u6570\u4ece\u7528\u6237\u63d0\u4f9b\u7684 packed HLL \u89e3\u6790 lenUsed \u4e0e lenTotal \u540e\uff0c\u4ec5\u68c0\u67e5\u8f93\u5165\u957f\u5ea6\u8db3\u4ee5\u8986\u76d6 HLL_HEAD_SIZE + lenUsed\uff0c\u968f\u540e\u6309 lenTotal \u5206\u914d\u7f13\u51b2\u533a\u3001\u6309 lenUsed \u8c03\u7528 memcpy_s() \u62f7\u8d1d\u8f93\u5165\uff0c\u65e2\u672a\u6821\u9a8c lenTotal \u0026gt;= lenUsed\uff0c\u4e5f\u5c06 memcpy_s() \u76ee\u6807\u5927\u5c0f\u5199\u6210 lenUsed \u800c\u975e\u5b9e\u9645\u5206\u914d\u7684 lenTotal\uff0c\u5bfc\u81f4\u5b89\u5168\u62f7\u8d1d\u65e0\u6cd5\u62e6\u622a\u8d8a\u754c\u5199\u3002hll_in()\u3001hll_print()\u3001hll_cardinality() \u7b49 SQL \u5165\u53e3\u4f1a\u8d70\u540c\u4e00\u89e3\u5305\u8def\u5f84\u3002\u56e0\u6b64\uff0c\u666e\u901a\u6570\u636e\u5e93\u8fde\u63a5\u7528\u6237\u53ea\u9700\u6784\u9020 lenTotal \u5c0f\u4e8e lenUsed \u7684\u7578\u5f62 packed HLL\uff08\u4f8b\u5982\u7ecf ::hll \u8fdb\u5165 hll_in()\uff09\uff0c\u5373\u53ef\u89e6\u53d1\u670d\u52a1\u7aef\u5806\u8d8a\u754c\u5199\uff0c\u5b58\u5728\u5185\u5b58\u7834\u574f\u98ce\u9669\u3002\u6b64\u95ee\u9898\u968f packed HLL \u89e3\u5305\u51fd\u6570 HllObjectUnpack() \u8fdb\u5165\u4ee3\u7801\uff0cv2.1.0 \u8d77\u5373\u5b58\u5728\u3002\u53d7\u5f71\u54cd\u7248\u672c\u5305\u62ec 2.1.0\u30013.0.x\u30013.1.x\u30015.0.x\u30015.1.0\u30016.0.x\uff0c\u4ee5\u53ca 7.0.0-RC1\u30017.0.0-RC2\u30017.0.0-RC3\u3002\u8be5\u95ee\u9898\u5df2\u5728 7.0.0-LTS \u7248\u672c\u4fee\u590d\uff0c\u901a\u8fc7\u5728 HllObjectUnpack() \u4e2d\u8865\u9f50 lenUsed \u0026lt;= lenTotal \u6821\u9a8c\uff0c\u5e76\u5c06 memcpy_s() \u7684\u76ee\u6807\u5927\u5c0f\u6539\u4e3a\u5b9e\u9645\u5206\u914d\u7684 lenTotal\u3002\u4fee\u590d PR \u89c1 https://gitcode.com/opengauss/openGauss-server/pull/9380 \u3002\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "\u5728 openGauss-server \u7684 src/gausskernel/cbb/utils/hll/hll.cpp \u4e2d\uff0c\u5185\u7f6e\u51fd\u6570 HllObjectUnpack() \u5b58\u5728\u957f\u5ea6\u6821\u9a8c\u7f3a\u9677\u3002\u8be5\u51fd\u6570\u4ece\u7528\u6237\u63d0\u4f9b\u7684 packed HLL \u89e3\u6790 lenUsed \u4e0e lenTotal \u540e\uff0c\u4ec5\u68c0\u67e5\u8f93\u5165\u957f\u5ea6\u8db3\u4ee5\u8986\u76d6 HLL_HEAD_SIZE + lenUsed\uff0c\u968f\u540e\u6309 lenTotal \u5206\u914d\u7f13\u51b2\u533a\u3001\u6309 lenUsed \u8c03\u7528 memcpy_s() \u62f7\u8d1d\u8f93\u5165\uff0c\u65e2\u672a\u6821\u9a8c lenTotal \u003e= lenUsed\uff0c\u4e5f\u5c06 memcpy_s() \u76ee\u6807\u5927\u5c0f\u5199\u6210 lenUsed \u800c\u975e\u5b9e\u9645\u5206\u914d\u7684 lenTotal\uff0c\u5bfc\u81f4\u5b89\u5168\u62f7\u8d1d\u65e0\u6cd5\u62e6\u622a\u8d8a\u754c\u5199\u3002hll_in()\u3001hll_print()\u3001hll_cardinality() \u7b49 SQL \u5165\u53e3\u4f1a\u8d70\u540c\u4e00\u89e3\u5305\u8def\u5f84\u3002\u56e0\u6b64\uff0c\u666e\u901a\u6570\u636e\u5e93\u8fde\u63a5\u7528\u6237\u53ea\u9700\u6784\u9020 lenTotal \u5c0f\u4e8e lenUsed \u7684\u7578\u5f62 packed HLL\uff08\u4f8b\u5982\u7ecf ::hll \u8fdb\u5165 hll_in()\uff09\uff0c\u5373\u53ef\u89e6\u53d1\u670d\u52a1\u7aef\u5806\u8d8a\u754c\u5199\uff0c\u5b58\u5728\u5185\u5b58\u7834\u574f\u98ce\u9669\u3002\u6b64\u95ee\u9898\u968f packed HLL \u89e3\u5305\u51fd\u6570 HllObjectUnpack() \u8fdb\u5165\u4ee3\u7801\uff0cv2.1.0 \u8d77\u5373\u5b58\u5728\u3002\u53d7\u5f71\u54cd\u7248\u672c\u5305\u62ec 2.1.0\u30013.0.x\u30013.1.x\u30015.0.x\u30015.1.0\u30016.0.x\uff0c\u4ee5\u53ca 7.0.0-RC1\u30017.0.0-RC2\u30017.0.0-RC3\u3002\u8be5\u95ee\u9898\u5df2\u5728 7.0.0-LTS \u7248\u672c\u4fee\u590d\uff0c\u901a\u8fc7\u5728 HllObjectUnpack() \u4e2d\u8865\u9f50 lenUsed \u003c= lenTotal \u6821\u9a8c\uff0c\u5e76\u5c06 memcpy_s() \u7684\u76ee\u6807\u5927\u5c0f\u6539\u4e3a\u5b9e\u9645\u5206\u914d\u7684 lenTotal\u3002\u4fee\u590d PR \u89c1 https://gitcode.com/opengauss/openGauss-server/pull/9380 \u3002"
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based buffer overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T02:31:01.069Z",
"orgId": "a1a479f7-907b-4ae8-a999-9148cadc9224",
"shortName": "openGauss"
},
"references": [
{
"url": "https://gitcode.com/opengauss/openGauss-server/pull/9380"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "HLL \u53cd\u5e8f\u5217\u5316 lenTotal/lenUsed \u6821\u9a8c\u7f3a\u5931\u5bfc\u81f4\u5806\u8d8a\u754c\u5199",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "a1a479f7-907b-4ae8-a999-9148cadc9224",
"assignerShortName": "openGauss",
"cveId": "CVE-2026-111441",
"datePublished": "2026-10-19T02:31:01.069Z",
"dateReserved": "2026-10-16T03:04:58.958Z",
"dateUpdated": "2026-10-19T17:42:42.026Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"vulnrichment": {
"containers": "{\"cna\": {\"providerMetadata\": {\"orgId\": \"a1a479f7-907b-4ae8-a999-9148cadc9224\", \"shortName\": \"openGauss\", \"dateUpdated\": \"2026-10-19T02:31:01.069Z\"}, \"title\": \"HLL \\u53cd\\u5e8f\\u5217\\u5316 lenTotal/lenUsed \\u6821\\u9a8c\\u7f3a\\u5931\\u5bfc\\u81f4\\u5806\\u8d8a\\u754c\\u5199\", \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"cweId\": \"CWE-122\", \"description\": \"CWE-122 Heap-based buffer overflow\", \"type\": \"CWE\"}]}], \"impacts\": [{\"capecId\": \"CAPEC-100\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-100 Overflow Buffers\"}]}], \"affected\": [{\"vendor\": \"openGauss-server\", \"product\": \"openGauss-server\", \"platforms\": [\"openEuler Centos\"], \"collectionURL\": \"https://opengauss.org/zh/download/archive/?version=7.0.0%20(LTS)\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.0.0-LTS\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"openGauss-server\", \"product\": \"openGauss-server\", \"platforms\": [\"openEuler Centos\"], \"collectionURL\": \"https://opengauss.org/zh/download/archive/?version=7.0.0-RC3\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.0.0-RC1, 7.0.0-RC2 7.0.0-RC3\"}, {\"status\": \"affected\", \"version\": \"2.1.0\"}, {\"status\": \"affected\", \"version\": \"3.0.0-3.0.6\"}, {\"status\": \"affected\", \"version\": \"3.1.0\"}, {\"status\": \"affected\", \"version\": \"5.0.0-5.0.5\"}, {\"status\": \"affected\", \"version\": \"6.0.0-6.0.6\"}], \"defaultStatus\": \"unaffected\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"\\u5728 openGauss-server \\u7684 src/gausskernel/cbb/utils/hll/hll.cpp \\u4e2d\\uff0c\\u5185\\u7f6e\\u51fd\\u6570 HllObjectUnpack() \\u5b58\\u5728\\u957f\\u5ea6\\u6821\\u9a8c\\u7f3a\\u9677\\u3002\\u8be5\\u51fd\\u6570\\u4ece\\u7528\\u6237\\u63d0\\u4f9b\\u7684 packed HLL \\u89e3\\u6790 lenUsed \\u4e0e lenTotal \\u540e\\uff0c\\u4ec5\\u68c0\\u67e5\\u8f93\\u5165\\u957f\\u5ea6\\u8db3\\u4ee5\\u8986\\u76d6 HLL_HEAD_SIZE + lenUsed\\uff0c\\u968f\\u540e\\u6309 lenTotal \\u5206\\u914d\\u7f13\\u51b2\\u533a\\u3001\\u6309 lenUsed \\u8c03\\u7528 memcpy_s() \\u62f7\\u8d1d\\u8f93\\u5165\\uff0c\\u65e2\\u672a\\u6821\\u9a8c lenTotal \u003e= lenUsed\\uff0c\\u4e5f\\u5c06 memcpy_s() \\u76ee\\u6807\\u5927\\u5c0f\\u5199\\u6210 lenUsed \\u800c\\u975e\\u5b9e\\u9645\\u5206\\u914d\\u7684 lenTotal\\uff0c\\u5bfc\\u81f4\\u5b89\\u5168\\u62f7\\u8d1d\\u65e0\\u6cd5\\u62e6\\u622a\\u8d8a\\u754c\\u5199\\u3002hll_in()\\u3001hll_print()\\u3001hll_cardinality() \\u7b49 SQL \\u5165\\u53e3\\u4f1a\\u8d70\\u540c\\u4e00\\u89e3\\u5305\\u8def\\u5f84\\u3002\\u56e0\\u6b64\\uff0c\\u666e\\u901a\\u6570\\u636e\\u5e93\\u8fde\\u63a5\\u7528\\u6237\\u53ea\\u9700\\u6784\\u9020 lenTotal \\u5c0f\\u4e8e lenUsed \\u7684\\u7578\\u5f62 packed HLL\\uff08\\u4f8b\\u5982\\u7ecf ::hll \\u8fdb\\u5165 hll_in()\\uff09\\uff0c\\u5373\\u53ef\\u89e6\\u53d1\\u670d\\u52a1\\u7aef\\u5806\\u8d8a\\u754c\\u5199\\uff0c\\u5b58\\u5728\\u5185\\u5b58\\u7834\\u574f\\u98ce\\u9669\\u3002\\u6b64\\u95ee\\u9898\\u968f packed HLL \\u89e3\\u5305\\u51fd\\u6570 HllObjectUnpack() \\u8fdb\\u5165\\u4ee3\\u7801\\uff0cv2.1.0 \\u8d77\\u5373\\u5b58\\u5728\\u3002\\u53d7\\u5f71\\u54cd\\u7248\\u672c\\u5305\\u62ec 2.1.0\\u30013.0.x\\u30013.1.x\\u30015.0.x\\u30015.1.0\\u30016.0.x\\uff0c\\u4ee5\\u53ca 7.0.0-RC1\\u30017.0.0-RC2\\u30017.0.0-RC3\\u3002\\u8be5\\u95ee\\u9898\\u5df2\\u5728 7.0.0-LTS \\u7248\\u672c\\u4fee\\u590d\\uff0c\\u901a\\u8fc7\\u5728 HllObjectUnpack() \\u4e2d\\u8865\\u9f50 lenUsed \u003c= lenTotal \\u6821\\u9a8c\\uff0c\\u5e76\\u5c06 memcpy_s() \\u7684\\u76ee\\u6807\\u5927\\u5c0f\\u6539\\u4e3a\\u5b9e\\u9645\\u5206\\u914d\\u7684 lenTotal\\u3002\\u4fee\\u590d PR \\u89c1 https://gitcode.com/opengauss/openGauss-server/pull/9380 \\u3002\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\\u5728 openGauss-server \\u7684 src/gausskernel/cbb/utils/hll/hll.cpp \\u4e2d\\uff0c\\u5185\\u7f6e\\u51fd\\u6570 HllObjectUnpack() \\u5b58\\u5728\\u957f\\u5ea6\\u6821\\u9a8c\\u7f3a\\u9677\\u3002\\u8be5\\u51fd\\u6570\\u4ece\\u7528\\u6237\\u63d0\\u4f9b\\u7684 packed HLL \\u89e3\\u6790 lenUsed \\u4e0e lenTotal \\u540e\\uff0c\\u4ec5\\u68c0\\u67e5\\u8f93\\u5165\\u957f\\u5ea6\\u8db3\\u4ee5\\u8986\\u76d6 HLL_HEAD_SIZE + lenUsed\\uff0c\\u968f\\u540e\\u6309 lenTotal \\u5206\\u914d\\u7f13\\u51b2\\u533a\\u3001\\u6309 lenUsed \\u8c03\\u7528 memcpy_s() \\u62f7\\u8d1d\\u8f93\\u5165\\uff0c\\u65e2\\u672a\\u6821\\u9a8c lenTotal \u0026gt;= lenUsed\\uff0c\\u4e5f\\u5c06 memcpy_s() \\u76ee\\u6807\\u5927\\u5c0f\\u5199\\u6210 lenUsed \\u800c\\u975e\\u5b9e\\u9645\\u5206\\u914d\\u7684 lenTotal\\uff0c\\u5bfc\\u81f4\\u5b89\\u5168\\u62f7\\u8d1d\\u65e0\\u6cd5\\u62e6\\u622a\\u8d8a\\u754c\\u5199\\u3002hll_in()\\u3001hll_print()\\u3001hll_cardinality() \\u7b49 SQL \\u5165\\u53e3\\u4f1a\\u8d70\\u540c\\u4e00\\u89e3\\u5305\\u8def\\u5f84\\u3002\\u56e0\\u6b64\\uff0c\\u666e\\u901a\\u6570\\u636e\\u5e93\\u8fde\\u63a5\\u7528\\u6237\\u53ea\\u9700\\u6784\\u9020 lenTotal \\u5c0f\\u4e8e lenUsed \\u7684\\u7578\\u5f62 packed HLL\\uff08\\u4f8b\\u5982\\u7ecf ::hll \\u8fdb\\u5165 hll_in()\\uff09\\uff0c\\u5373\\u53ef\\u89e6\\u53d1\\u670d\\u52a1\\u7aef\\u5806\\u8d8a\\u754c\\u5199\\uff0c\\u5b58\\u5728\\u5185\\u5b58\\u7834\\u574f\\u98ce\\u9669\\u3002\\u6b64\\u95ee\\u9898\\u968f packed HLL \\u89e3\\u5305\\u51fd\\u6570 HllObjectUnpack() \\u8fdb\\u5165\\u4ee3\\u7801\\uff0cv2.1.0 \\u8d77\\u5373\\u5b58\\u5728\\u3002\\u53d7\\u5f71\\u54cd\\u7248\\u672c\\u5305\\u62ec 2.1.0\\u30013.0.x\\u30013.1.x\\u30015.0.x\\u30015.1.0\\u30016.0.x\\uff0c\\u4ee5\\u53ca 7.0.0-RC1\\u30017.0.0-RC2\\u30017.0.0-RC3\\u3002\\u8be5\\u95ee\\u9898\\u5df2\\u5728 7.0.0-LTS \\u7248\\u672c\\u4fee\\u590d\\uff0c\\u901a\\u8fc7\\u5728 HllObjectUnpack() \\u4e2d\\u8865\\u9f50 lenUsed \u0026lt;= lenTotal \\u6821\\u9a8c\\uff0c\\u5e76\\u5c06 memcpy_s() \\u7684\\u76ee\\u6807\\u5927\\u5c0f\\u6539\\u4e3a\\u5b9e\\u9645\\u5206\\u914d\\u7684 lenTotal\\u3002\\u4fee\\u590d PR \\u89c1 https://gitcode.com/opengauss/openGauss-server/pull/9380 \\u3002\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\"}]}], \"references\": [{\"url\": \"https://gitcode.com/opengauss/openGauss-server/pull/9380\"}], \"metrics\": [{\"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}], \"cvssV3_1\": {\"version\": \"3.1\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"baseSeverity\": \"HIGH\", \"baseScore\": 8.1, \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\"}}], \"source\": {\"discovery\": \"EXTERNAL\"}, \"x_generator\": {\"engine\": \"Vulnogram 1.0.5\"}}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-111441\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-10-19T17:42:18.566832Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-10-19T17:42:33.715Z\"}}]}",
"cveMetadata": "{\"cveId\": \"CVE-2026-111441\", \"assignerOrgId\": \"a1a479f7-907b-4ae8-a999-9148cadc9224\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"openGauss\", \"dateReserved\": \"2026-10-16T03:04:58.958Z\", \"datePublished\": \"2026-10-19T02:31:01.069Z\", \"dateUpdated\": \"2026-10-19T17:42:42.026Z\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…