{"metadata": {"vulnerability": "CVE-2026-111438", "count": 13, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-16T03:04:53.420Z", "date_only": false, "value": "2026-10-16T03:04:53.420Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111438", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-19T08:08:03.265Z", "date_only": false, "value": "2026-10-19T08:08:03.265Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111438", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T08:08:03.265Z", "date_only": false, "value": "2026-10-19T08:08:03.265Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / openGauss", "record": "CVE-2026-111438", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-19T08:36:34.161Z", "date_only": false, "value": "2026-10-19T08:36:34.161088Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117466660444054071", "record": "CVE-2026-111438", "field": "creation_timestamp", "uuid": "48b19a6b-d9b4-4ceb-9710-851b20a2fbd9", "content": "CVE-2026-111438 check_hba_replication \u8ba4\u8bc1\u4e0e\u8bbf\u95ee\u63a7\u5236\u7ed5\u8fc7 \u5728 openGauss-server \u7684 src/common/backend/libpq/hba.cpp \u4e2d\uff0c\u590d\u5236\u8fde\u63a5\u8ba4\u8bc1\u5b58\u5728\u8bbf\u95ee\u63a7\u5236\u7ed5\u8fc7\u3002hba_getauthmethod() \u5728\u5904\u7406 HADR/SW \u590d\u5236\u53d1\u9001\u65b9\u65f6\uff0c\u4e0d\u8981\u6c42 is_node_internal_connection()\uff0c\u76f4\u63a5\u8c03\u7528 check_hba_replication()\u3002check_hba_replication() \u4ec5\u6309 replication \u6807\u8bb0\u505a\u5f31\u5339\u914d\uff0c\u7f3a\u5c11\u666e\u901a check_hba() \u4e2d\u7684\u8fdc\u7a0b trust \u7981\u6b62\u7b49\u5b8c\u6574\u6821\u9a8c\u3002\u56e0\u6b64\uff0c\u975e\u5185\u90e8\u7f51\u7edc\u7684 HADR/SW \u590d\u5236\u8fde\u63a5\u53ef\u7ed5\u8fc7\u5185\u90e8\u8fde\u63a5\u9650\u5236\u548c\u5b8c\u6574 pg_hba \u7b56\u7565\u5b8c\u6210\u8ba4\u8bc1\uff0c\u8fdb\u800c\u901a\u8fc7\u590d\u5236\u534f\u8bae\u8bfb\u53d6\u5907\u4efd\u4e0e\u65e5\u5fd7\u6570\u636e\u3002\n\u6b64\u95ee\u9898\u968f HADR \u590d\u5236\u53d1\u9001\u65b9\u7ed5\u8fc7\u5185\u90e8\u8fde\u63a5\u6821\u9a8c\u8fdb\u5165\u4ee3\u7801\uff0c\u81ea 3.0.0 \u8d77\u5373\u5b58\u5728\u3002\u53d7\u5f71\u54cd\u7248\u672c\u5305\u62ec 3.0.x\u30013.1.x\u30015.0.x\u30015.1.0\u30016.0.x\uff0c\u4ee5\u53ca 7.0.0-RC1\u30017.0.0-RC2\u30017.0.0-RC3\u3002\u8be5\u95ee\u9898\u5df2\u5728 7.0.0-LTS\u7248\u672c\u4fee\u590d\uff0c\u901a\u8fc7\u8981\u6c42 HADR/SW \u590d\u5236\u53d1\u9001\u65b9\u5fc5\u987b\u7ecf\u8fc7 is_node_internal_connection \u6821\u9a8c\uff0c\u4f7f\u5916\u90e8\u590d\u5236\u8fde\u63a5\u6539\u8d70\u666e\u901a check_hba() \u5e76\u89e6\u53d1\u7981\u6b62\u8fdc\u7a0b trust \u7b56\u7565\u3002\u4fee\u590dpr\u89c1https://gitcode.com/opengauss/openGauss-server/pull/9757\u3002\nhttps://www.cve.org/CVERecord?id=CVE-2026-111438https://gitcode.com/opengauss/openGauss-server/pull/9757#gitcode #openGauss-server#CVE_2026_111438#bot", "url": "https://infosec.exchange/users/cve/statuses/117466660444054071"}, {"timestamp": "2026-10-19T09:17:07Z", "date_only": false, "value": "2026-10-19T09:17:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-65MG-G3FH-WFVJ", "record": "GHSA-65MG-G3FH-WFVJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-19T09:17:07.173Z", "date_only": false, "value": "2026-10-19T09:17:07.173", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111438", "record": "FKIE_CVE-2026-111438", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T09:32:30Z", "date_only": false, "value": "2026-10-19T09:32:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-65MG-G3FH-WFVJ", "record": "GHSA-65MG-G3FH-WFVJ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T09:32:30Z", "date_only": false, "value": "2026-10-19T09:32:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-65MG-G3FH-WFVJ", "record": "GHSA-65MG-G3FH-WFVJ", "field": "modified"}, {"timestamp": "2026-10-19T17:22:00.742Z", "date_only": false, "value": "2026-10-19T17:22:00.742739Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111438", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-19T17:22:00.742Z", "date_only": false, "value": "2026-10-19T17:22:00.742739Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111438", "record": "FKIE_CVE-2026-111438", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-19T17:22:23.532Z", "date_only": false, "value": "2026-10-19T17:22:23.532Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111438", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-19T17:22:23.532Z", "date_only": false, "value": "2026-10-19T17:22:23.532Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111438", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-19T20:56:36.663Z", "date_only": false, "value": "2026-10-19T20:56:36.663", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111438", "record": "FKIE_CVE-2026-111438", "field": "lastModified"}], "metrics": {"as_of": "2026-10-29T08:25:41.358Z", "anchors": {"origin": {"timestamp": "2026-10-19T08:08:03.265Z", "date_only": false, "value": "2026-10-19T08:08:03.265Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111438", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-19T08:08:03.265Z", "date_only": false, "value": "2026-10-19T08:08:03.265Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111438", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 865058.093594, "hours": 240.29391488722223, "days": 10.012246453634258, "min_seconds": 865058.093594, "max_seconds": 865058.093594, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-19T08:08:03.265Z", "date_only": false, "value": "2026-10-19T08:08:03.265Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111438", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T08:25:41.358Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}