{"metadata": {"vulnerability": "CVE-2026-111439", "count": 13, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-16T03:04:55.778Z", "date_only": false, "value": "2026-10-16T03:04:55.778Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111439", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-19T07:59:44.700Z", "date_only": false, "value": "2026-10-19T07:59:44.700Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111439", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T07:59:44.700Z", "date_only": false, "value": "2026-10-19T07:59:44.700Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / openGauss", "record": "CVE-2026-111439", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-19T08:02:51.283Z", "date_only": false, "value": "2026-10-19T08:02:51.283799Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117466527870929176", "record": "CVE-2026-111439", "field": "creation_timestamp", "uuid": "0a2098a5-26eb-4bd8-8c16-cf459796c108", "content": "CVE-2026-111439 pg_read_binary_file_blocks \u7f3a\u5c11\u521d\u59cb\u7528\u6237\u6743\u9650\u6821\u9a8c\uff0c\u666e\u901a\u7528\u6237\u53ef\u8bfb\u53d6 relation \u6587\u4ef6\u5757 \u5728 openGauss-server\u7684 src/common/backend/utils/adt/genfile.cpp \u6a21\u5757\u4e2d\uff0c\u5185\u7f6e\u51fd\u6570 pg_read_binary_file_blocks() \u5b58\u5728\u6743\u9650\u6821\u9a8c\u903b\u8f91\u7f3a\u9677\u3002\u8be5\u51fd\u6570\u5728\u5165\u53e3\u5904\u4ec5\u6821\u9a8c\u4e86\u8d77\u59cb\u5757\u53f7\uff08startBlockNum\uff09\u548c\u5757\u6570\u91cf\uff08blockCount\uff09\u7684\u8303\u56f4\uff0c\u968f\u540e\u76f4\u63a5\u8c03\u7528\u5e95\u5c42\u6587\u4ef6\u8bfb\u53d6\u4f8b\u7a0b ReadBinaryFileBlocksFirstCall()\u3002\u8be5\u5e95\u5c42\u4f8b\u7a0b\u4ec5\u6267\u884c\u4e86\u8def\u5f84\u89c4\u8303\u5316\u68c0\u67e5\u4ee5\u53ca\u9488\u5bf9 .. \u8def\u5f84\u904d\u5386\u548c\u6570\u636e\u76ee\u5f55\u8fb9\u754c\u7684\u57fa\u672c\u68c0\u67e5\uff0c\u7f3a\u5931\u4e86\u5bf9\u8c03\u7528\u8005\u6570\u636e\u5e93\u6743\u9650\uff08\u5982 SELECT \u6743\u9650\uff09\u7684\u6821\u9a8c\u3002\u6b64\u5916\uff0c\u8f85\u52a9\u51fd\u6570 is_row_data_file() \u4e5f\u4ec5\u7528\u4e8e\u8bc6\u522b\u6587\u4ef6\u5f62\u6001\uff0c\u672a\u5305\u542b\u6743\u9650\u68c0\u67e5\u3002\u56e0\u6b64\uff0c\u4efb\u4f55\u62e5\u6709\u666e\u901a\u6570\u636e\u5e93\u8fde\u63a5\u6743\u9650\u7684\u7528\u6237\uff0c\u53ea\u8981\u80fd\u591f\u901a\u8fc7 pg_relation_filepath() \u7b49\u51fd\u6570\u83b7\u53d6\u5230\u76ee\u6807\u8868\u7684\u5e95\u5c42\u5173\u7cfb\u6587\u4ef6\u8def\u5f84\uff08\u4f8b\u5982\u538b\u7f29\u6570\u636e\u7684 _compress \u6587\u4ef6\u8def\u5f84\uff09\uff0c\u5373\u53ef\u65e0\u9700\u5177\u5907\u8be5\u8868\u7684 SELECT \u6743\u9650\uff0c\u76f4\u63a5\u8bfb\u53d6\u8868\u6570\u636e\u7684\u4e8c\u8fdb\u5236\u5757\u3002\u6b64\u6f0f\u6d1e\u5f71\u54cd\u6b64\u524d3.0.0\u52306.0.0\u95f4\u7684\u6240\u6709\u7248\u672c\u53ca\u8865\u4e01\u7248\uff0c\u5e76\u57287.0.0-LTS\u7248\u672c\u4fee\u590d\u3002\u4fee\u590dpatch\u8be6\u89c1\uff1ahttps://gitcode.com/opengauss/openGauss-server/pull/9374\u3002\nhttps://www.cve.org/CVERecord?id=CVE-2026-111439https://gitcode.com/opengauss/openGauss-server/pull/9374#gitcode #openGauss-server#CVE_2026_111439#bot", "url": "https://infosec.exchange/users/cve/statuses/117466527870929176"}, {"timestamp": "2026-10-19T08:17:02Z", "date_only": false, "value": "2026-10-19T08:17:02Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CR5J-X763-5676", "record": "GHSA-CR5J-X763-5676", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-19T08:17:02.130Z", "date_only": false, "value": "2026-10-19T08:17:02.130", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111439", "record": "FKIE_CVE-2026-111439", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T09:32:30Z", "date_only": false, "value": "2026-10-19T09:32:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CR5J-X763-5676", "record": "GHSA-CR5J-X763-5676", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T09:32:30Z", "date_only": false, "value": "2026-10-19T09:32:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CR5J-X763-5676", "record": "GHSA-CR5J-X763-5676", "field": "modified"}, {"timestamp": "2026-10-19T17:24:53.483Z", "date_only": false, "value": "2026-10-19T17:24:53.483125Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111439", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-19T17:24:53.483Z", "date_only": false, "value": "2026-10-19T17:24:53.483125Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111439", "record": "FKIE_CVE-2026-111439", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-19T17:25:07.334Z", "date_only": false, "value": "2026-10-19T17:25:07.334Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111439", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-19T17:25:07.334Z", "date_only": false, "value": "2026-10-19T17:25:07.334Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111439", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-19T20:56:36.663Z", "date_only": false, "value": "2026-10-19T20:56:36.663", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111439", "record": "FKIE_CVE-2026-111439", "field": "lastModified"}], "metrics": {"as_of": "2026-10-29T19:33:43.780Z", "anchors": {"origin": {"timestamp": "2026-10-19T07:59:44.700Z", "date_only": false, "value": "2026-10-19T07:59:44.700Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111439", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-19T07:59:44.700Z", "date_only": false, "value": "2026-10-19T07:59:44.700Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111439", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 905639.080682, "hours": 251.56641130055556, "days": 10.481933804189815, "min_seconds": 905639.080682, "max_seconds": 905639.080682, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-19T07:59:44.700Z", "date_only": false, "value": "2026-10-19T07:59:44.700Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111439", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T19:33:43.780Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}