CVE-2026-111440 | openGauss-server openGauss-connector-jdbc up to 7.0.0-RC3 LogFactory LogFactory.java Class.forName logger code injection

October 19, 2026 Yanac

A vulnerability, which was classified as critical, has been found in openGauss-server openGauss-connector-jdbc. The affected element is the function Class.forName of the file pgjdbc/src/main/java/org/postgresql/log/LogFactory.java of the component LogFactory. Performing a manipulation of the argument logger results in code injection.

This vulnerability is identified as CVE-2026-111440. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More