CVE-2026-111440 JDBC LogFactory 任意类加载/构造导致潜在 RCE

[
  {
    "vendor": "openGauss-server",
    "product": "openGauss-connector-jdbc",
    "platforms": [
      "openEuler Centos"
    ],
    "collectionURL": "https://opengauss.org/zh/download/archive/?version=7.0.0-RC3",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.0.0-LTS"
      },
      {
        "status": "affected",
        "version": "1.0.0, 1.0.1, 1.1.0"
      },
      {
        "status": "affected",
        "version": "2.0.0, 2.1.0"
      },
      {
        "status": "affected",
        "version": "3.0.0-3.0.5"
      },
      {
        "status": "affected",
        "version": "3.10-3.1.1"
      },
      {
        "status": "affected",
        "version": "5.0.0-5.0.3"
      },
      {
        "status": "affected",
        "version": "5.1.0"
      },
      {
        "status": "affected",
        "version": "5.0.0-RC1"
      },
      {
        "status": "affected",
        "version": "6.0.0-RC1"
      },
      {
        "status": "affected",
        "version": "6.0.0-6.0.6"
      },
      {
        "status": "affected",
        "version": "7.0.0-RC1, 7.0.0-RC2, 7.0.0-RC3"
      }
    ],
    "defaultStatus": "unaffected"
  }
]