📊 HiddenMerit Morning Post · Issue 80

Focus on Database Frontiers, Practical Insights for DBAs August 20, 2026 ｜ 5 Selected Global Breaking News

01｜DTCC 2026 Opens Today in Beijing: AI + Database Takes Centre Stage, 100+ Experts Explore Data Intelligence Integration

On August 20, the 17th China Database Technology Conference (DTCC 2026) officially opened at the Langes Hotel in Beijing. The conference theme is “Integrating Data, Aggregating Intelligence, Creating the Future,” featuring 2 main venues, 17+ specialised technical tracks, and over 100 industry technical experts sharing insights. The content covers database kernel R&D, cloud‑native and distributed practices, AI‑empowered data, vector databases, multi‑agent collaboration, and other current technology hotspots and industry pain points.

Key Highlights: This year’s conference, for the first time, systematically features dual‑track sessions on “Data+AI” and “AI for DB.” The Data+AI full‑chain integration track spans three parts covering low‑cost enterprise large model implementation, AI‑native databases, vector retrieval, and AI agent data engineering. The AI for DB intelligent autonomous operations track focuses on operations agents, multi‑agent collaboration, and ontology‑driven fault localisation, showcasing AIOps implementation in education, telecommunications, internet, and other industries. On the evening of August 20, a “DBA Night” expert dinner will be held, with a closed‑door discussion on the theme “AI’s Impact on the Full IT Stack and Response Strategies.”

Vendor Updates: Tencent Cloud Database will present an all‑star lineup on “Building Data Foundations for the Agent Era,” covering TDSQL‑C storage architecture evolution and AI optimiser practices, TDSQL Nexa (enabling agents to truly understand and utilise enterprise data), and DatabaseClaw database agent productisation practices. CETC Kingware Product Manager Zhang Hao will deliver a keynote titled “Changing Scenarios, Unchanging Core: Continuous Evolution of Converged Database Architecture in the AI Era” in the “Database Kernel and Frontier Technology Innovation” track.

• DBA Perspective: DTCC is the largest technical conference in China’s database field and an important window for DBAs to access technology evolution directions. This year, “AI + Database” is the absolute core theme – with both AI for DB (making databases smarter) and DB for AI (enabling databases to support AI applications) running in parallel. DBAs are advised to focus on the Data+AI Full‑Chain Integration and AI for DB Intelligent Operations tracks – these two directions will directly impact the skill evolution path for DBAs over the next 3‑5 years. The real‑world domestic replacement practice cases shared at the conference in finance, telecommunications, and other sectors are also important references for Xinchuang selection.

Source: DTCC Official Agenda & IT168 Coverage

02｜OceanBase Funding and Dameng’s Top Ranking: Ant Group Capital Operations Accelerate, Domestic Database Leadership Landscape Established

According to a Caijing special report, Ant Group’s three independent business units – OceanBase, Ant Digital, and Ant International – have recently intensively launched external funding rounds. Ant International completed a Series A round of approximately $1.2 billion in July, OceanBase is seeking approximately RMB 2‑3 billion in Series A funding, and Ant Digital is preparing for a Pre‑IPO round. All three companies began independent operations in March 2024, and this funding round serves as a milestone review of their independent operational effectiveness.

OceanBase Key Data: In 2026, OceanBase’s annualized revenue has exceeded RMB 1.4 billion, up approximately 70% year‑on‑year. As of June 2026, OceanBase has served over 400 financial institutions, with nearly 70% of trillion‑yuan banks deploying its systems. Global customers have exceeded 4,000. CCID Consulting reports show OceanBase ranked first in China’s distributed database market. OceanBase CEO Yang Bing previously stated that the company aims to go public in approximately three to four years.

Dameng’s Top Ranking: CCID Consulting’s “2025‑2026 China Platform Software Market Research Annual Report” shows that Dameng surpassed foreign database vendors for the first time, ranking first in China’s database management system market. Since 2019, Dameng has maintained the top position among domestic vendors for seven consecutive years, and this marks the transition from “number one domestic” to “number one overall.” Dameng’s 2025 revenue reached RMB 1.306 billion, with products serving major customers including China Construction Bank, PICC, State Grid, and China Mobile.

• DBA Perspective: OceanBase’s first external funding and Dameng’s top overall ranking constitute dual milestones in the domestic database field. OceanBase’s benchmarking against Databricks means its strategic direction is extending from a “database company” to an “AI data platform” – DBA skills need to expand from “distributed database operations” to “AI data platform architecture and multi‑modal data management.” Dameng’s 100% self‑developed code path and continued deployments in energy, finance, government, and other core sectors provide quantifiable references for DBAs selecting in critical sectors.

03｜CETC Kingware to Appear at DTCC 2026: RAC Remains the Objectively Optimal Solution for Core Systems in the AI Era

From August 20‑22 during DTCC 2026, CETC Kingware Product Manager Zhang Hao will deliver a keynote titled “Changing Scenarios, Unchanging Core: Continuous Evolution of Converged Database Architecture in the AI Era.” In a pre‑conference interview, Zhang Hao proposed a core judgment: Technology waves change “interaction and enhancement,” but what remains unchanged is “foundation and trust.”

Four Unshakeable Bottom Lines: In the AI era, core transaction systems have four bottom lines – strong data consistency (ACID), extreme high availability and business continuity (RPO=0, RTO in seconds), deterministic low latency under high concurrency, and full‑stack security and compliance.

Why RAC Remains the Objectively Optimal Solution for Core Systems: Zhang Hao explicitly stated that in core transaction scenarios, distributed architectures certainly bring horizontal scaling capability, but at the cost of high latency in cross‑node distributed transactions, strong business code invasiveness, and complex maintenance overhead. Shared storage clusters achieve multi‑node read‑write sharing and second‑level fault switching in a “business‑transparent” manner, making them the natural architecture for solving core system high availability and high throughput. Zhang Hao judged that “AI can optimise database operations, diagnostics, and even SQL generation, but AI cannot solve the classic problem of ‘multiple nodes writing to the same data concurrently while guaranteeing ACID’ – this problem can only be solved by the database kernel itself.”

Single‑Kernel Native Multi‑Modal Convergence: Kingbase databases have moved from the “multi‑modal patchwork” stage to the mature “single‑kernel native multi‑modal convergence” stage – relational data, document data, time‑series data, and vector data are all stored and computed within the same kernel, rather than hanging multiple independent engines through a Lego‑style approach.

• DBA Perspective: Kingware’s steadfastness on RAC architecture at DTCC is worth deep consideration by DBAs. Against the backdrop of rising cloud‑native and distributed architecture voices, Kingware’s judgement that “RAC is the objectively optimal solution for core scenarios” provides important decision‑making reference for DBAs in choosing between distributed and shared storage cluster architectures. Single‑kernel native multi‑modal convergence (relational + document + time‑series + vector) also reminds DBAs that the future technology path for multi‑modal convergence is moving from “multi‑database patchwork” to “one database, multiple models,” rather than continuing to maintain multiple heterogeneous systems.

Source: IT168 Interview Coverage

04｜Android High‑Risk Vulnerability CVE-2026-0075: Contacts Database Can Be Stolen Without User Interaction

On August 19, security researchers publicly released exploit code (PoC) and detailed technical analysis for the Android high‑risk vulnerability CVE-2026-0075. The vulnerability exists in the Android system’s ContactsProvider2 component and is a privilege escalation vulnerability. Attackers can access the device’s contacts database via SQL injection without any user interaction or special permissions, posing a serious threat to user privacy.

Vulnerability Principle: The vulnerability stems from a flaw in the ContactsProvider2 component when handling specific queries – the component returns JSON error messages containing SQLite exception information to callers without the READ_CONTACTS permission, creating an error side‑channel. Attackers can construct malicious input to trigger SQL injection, subsequently inferring sensitive content from the contacts database through error messages. Google has rated this vulnerability as “High,” with a CVSS score of 7.8, affecting Android 14, 15, 16, and 16‑qpr2, among other versions.

Remediation: Google released a fix in the June 2026 security bulletin. Users should immediately check their device’s security patch level and update to June 5, 2026, or later. No in‑the‑wild exploitation has been discovered yet, but the public PoC has lowered the exploitation barrier.

• DBA Perspective: Although Android vulnerabilities are typically outside a DBA’s direct purview, this vulnerability involves cross‑scenario transplantation of database SQL injection – mobile application components face SQL injection risks as well. For DBAs, this case also reminds teams that in non‑traditional database scenarios such as mobile, embedded, and edge computing, SQL injection attack surfaces exist and should not be ignored simply because they are “not on the database server.”

05｜Weekly Security Vulnerabilities Focus: DeDeCMS SQL Injection (CVE-2026-76783, CVSS 7.3), Mini‑Inventory SQL Injection

Multiple web application security vulnerabilities related to databases were disclosed this week:

DeDeCMS SQL Injection (CVE-2026-76783, CVSS 7.3) : Affects DeDeCMS version 53_1_UTF8. The vulnerability resides in the /plus/advancedsearch.php file, with the sql parameter vulnerable to SQL injection. Attackers can launch attacks remotely, with exploit code publicly disclosed. CVSS v3.1 score is 7.3 (High), with network‑remote attack vector, low attack complexity, no authentication required, no user interaction, and low impact on confidentiality/integrity/availability.

Mini‑Inventory‑and‑Sales‑Management‑System SQL Injection (CVE-2026-76785, CVSS 6.3) : Affects amirsanni Mini‑Inventory‑and‑Sales‑Management‑System version 0.1. The vulnerability resides in the Transaction::getAll function in application/models/Transaction.php, with the orderBy/orderFormat parameters vulnerable to SQL injection. Attackers can exploit remotely, with a CVSS v3.1 score of 6.3 (Medium), requiring low‑privilege authenticated user identity.

• DBA Perspective: As a representative domestic CMS system, the DeDeCMS SQL injection vulnerability once again reminds DBAs that the web application layer is the first line of defence for database security. Application‑layer SQL injection can directly lead to database core data leakage. DBAs should work with security teams to conduct specialised security audits of application‑layer components with “database read/write privileges” such as CMS and low‑code platforms, and monitor potentially expanding attack surfaces after PoC public disclosure.

📚 SQL Little Knowledge Point

This Issue’s Knowledge Point: What are “AI for DB” and “DB for AI”?

DTCC 2026 explicitly delineates the integration of AI and databases into two technology tracks – AI for DB and DB for AI – which has become the standard classification framework in the database industry.

Dimension	AI for DB (AI Empowers Databases)	DB for AI (Databases Support AI)
Direction	Using AI to make databases smarter	Making databases better support AI applications
Core Capabilities	Intelligent operations, auto‑tuning, anomaly diagnosis, parameter recommendations	Vector retrieval, multi‑modal data management, agent memory storage
Representative Products	Tencent Cloud DatabaseClaw, Alibaba Cloud PolarDB AI Assistant	OceanBase Lakehouse‑Integrated, Kingbase Multi‑Modal Converged Database
Impact on DBAs	Daily operations tasks replaced by AI agents; role evolves toward “policy manager”	Need to master new skills such as vector indexing and multi‑modal querying

Practical Significance at DTCC 2026: The conference systematically features multiple tracks on “AI for DB (Part 1/2)” and “Data+AI (Part 1/2/3),” covering the full chain from database kernel to AI applications. The “AI for DB” track focuses on operations agents, multi‑agent collaboration, and engineering practices of database diagnostic agents. The “Data+AI” track focuses on vector databases, AI agent data engineering, and low‑cost enterprise large model implementation. These two technology tracks are not mutually exclusive but evolve in parallel – in the future, DBAs need to understand both how AI optimises databases and how databases support AI applications.

HiddenMerit Team Production Slogan: 绩优隐于内，金石启新程 | Hidden deep. Merit bold. Forge ahead.