📊 HiddenMerit Morning Post · Issue 82

Focus on Database Frontiers, Practical Insights for DBAs August 22, 2026 ｜ 5 Selected Global Breaking News

01｜Dameng Tops Domestic Database Market Share, Domestic Replacement Breaches 30% Tipping Point

According to the latest CCID Consulting data, in 2025, Dameng ranked first among domestic vendors in China’s relational database market with a 13.2% market share, followed by Renda Kingbase at 11.5% and OceanBase at 10.8%. The combined share of these three vendors in China’s relational database market has exceeded 35%, forming a “first tier” of domestic databases.

Industry data shows that the domestic database software market reached RMB 7.93 billion in 2025, with a market share of 26.89%, and is expected to exceed RMB 10 billion in 2026, approaching a 30% market share. China Merchants Securities analysis suggests that after the domestic database market share breaches the 30% tipping point, it will accelerate into the large‑scale replacement phase, with core system replacement in key industries such as finance, telecommunications, and government becoming the main battlefield in the next phase.

• DBA Perspective: The three‑strong pattern of Dameng, Kingbase, and OceanBase is now essentially established. For DBAs, these three product lines should be the priority directions for Xinchuang skill development. The breach of the 30% tipping point means domestic databases are shifting from “policy‑driven” to “market‑driven,” and DBA job demand in Xinchuang positions across key industries such as finance, telecommunications, and government will further expand.

02｜DTCC 2026 Conference: AI + Database Becomes the Absolute Core Theme, Tencent Cloud TDSQL Nexa Officially Released

From August 20‑22, the 17th China Database Technology Conference (DTCC 2026) was held in Beijing. The conference, themed “Integrating Data, Aggregating Intelligence, Creating the Future,” featured 2 main venues, 16+ specialised technical tracks, and 100 top industry experts sharing insights.

Tencent Cloud TDSQL Nexa Officially Released: Tencent Cloud Vice President Wang Yicheng announced the release of TDSQL Nexa, an AI‑era data foundation that connects dispersed multi‑source enterprise data through a unified entry point, providing agents with business semantic understanding and permission governance capabilities. Testing shows TDSQL Nexa achieves over 10x computational performance improvement and over 60% cost reduction compared to open‑source combination solutions. Its Nexa Knowledge semantic layer improves the accuracy of agent‑generated SQL by over 50% . Meanwhile, Agent Memory, open‑sourced for 80 days, has already gained over 20,000 GitHub Stars, and DatabaseClaw has entered large‑scale production use at lead customers, with some fault root cause localisation completed in as little as 3 minutes.

Dameng All‑in‑One Appears: Dameng All‑in‑One Product Line General Manager Zhu Honglei systematically introduced the latest achievements of the DAMENG PAI Database All‑in‑One, covering three core technologies – extreme storage, compute offloading (embedding compute engines in storage), and full‑stack acceleration (200Gb/s RoCE v2 high‑speed network) – aiming to “build a performance benchmark for domestic data services” and drive critical industries from “usable” to “true replacement and true use.”

• DBA Perspective: DTCC is an important window for DBAs to access technology evolution directions. This year, “AI + Database” became the absolute core theme – with both AI for DB and DB for AI tracks running in parallel. TDSQL Nexa’s semantic layer capabilities, Agent Memory’s 20,000 Stars data, and DatabaseClaw’s 3‑minute root cause localisation are all quantitative references for DBAs evaluating “AI‑ready” databases. Dameng all‑in‑one’s performance metrics (200Gb/s RoCE v2) are also important references for DBAs in core system hardware selection.

03｜Financial Core System Xinchuang Accelerates: Over 50% of Bank Cores Now Use Distributed Databases

According to CAICT statistics, the financial industry database landscape is still dominated by Oracle (55%) and DB2 (19%), but the domestic replacement trend is accelerating significantly. OceanBase, Alibaba Cloud PolarDB, Huawei Cloud GaussDB, and Tencent Cloud TDSQL have become the most widely used domestic databases in banking, with usage rates of 23.4%, 22.2%, 21.5%, and 20.3% respectively.

Key Data: Over 50% of bank core systems have adopted distributed databases, with penetration expected to exceed 90% in the next three years. OceanBase leads with a 39.1% market share. OceanBase has served all policy banks, 5 of the 6 state‑owned major banks, and over 100 banks with assets exceeding RMB 100 billion. The 2025 China financial industry domestic distributed database on‑premises deployment market reached RMB 2.02 billion, up 37.6% year‑on‑year.

In the telecommunications sector, Shandong Mobile completed the domestic distributed database upgrade of its core CRM/BOSS systems in 2020, achieving a 35% improvement in system transaction processing capability (TPS) while reducing overall infrastructure and software licensing costs by 50% .

• DBA Perspective: Financial Xinchuang has fully entered the “core breakthrough” phase from “peripheral pilot.” Over 50% of bank cores adopting distributed databases means DBA job demand in the financial industry has upgraded from “edge system operations” to “core system architecture design and high‑availability assurance.” The telecom sector data of 35% TPS improvement and 50% cost reduction is also an important reference for DBAs in evaluating domestic database TCO in operator Xinchuang projects.

04｜CVE-2026-55642: dbx‑web Database Client Exposes Unauthenticated Remote SQL Execution Vulnerability

In August, the dbx‑web database client was found to have a critical security vulnerability (CVE-2026-55642), with a CVSS score of 9.8 (Critical). The vulnerability allows unauthenticated remote attackers to execute arbitrary SQL queries, affecting all versions up to v0.5.50.

Vulnerability Details: dbx‑web is the Web/Docker service component of the t8y2/dbx cross‑platform database client. The vulnerability stems from the authentication middleware being “fail‑open” when no password is configured – when password_hash is None, requests pass authentication checks unconditionally, reaching protected API endpoints directly. dbx‑web binds to 0.0.0.0 (all network interfaces) by default, and the official quick‑start process does not require setting a default password, meaning out‑of‑the‑box deployments are vulnerable by default. Attackers can access API endpoints such as /api/connection/connect and /api/query/execute to execute arbitrary SQL using stored database credentials, achieving full read, modification, and destruction capabilities.

Remediation: Upgrade to v0.5.51 or higher. Temporary mitigation measures include: not exposing dbx‑web/Docker services directly to the public internet, restricting access to local or trusted internal networks only; explicitly configuring a strong password; and auditing existing deployments for anomalous SQL activity.

• DBA Perspective: CVSS 9.8 means this vulnerability has an extremely low exploitation barrier and high impact. As a cross‑platform database client tool, if its web version is deployed by DBAs or developers for remote management, it could become a springboard for attackers to enter enterprise internal networks. Particularly concerning is the “default no password” design flaw – the documentation does not mandate setting a password, leaving many out‑of‑the‑box deployments default‑exposed. DBAs are advised to immediately check whether dbx‑web services are deployed internally, upgrade versions, and implement strict network access controls on publicly exposed management tools.

05｜Kingware Vector Search Ecosystem Breakthrough: Multi‑Modal Data Fusion Retrieval Capabilities Fully Empowered

CETC Kingware recently published a technical article announcing a comprehensive upgrade of KingbaseES vector search capabilities, marking the official entry of the Kingware database ecosystem into the “storage‑compute‑intelligence” integrated phase. Through the introduction of a native vector data model, KingbaseES achieves unified storage and management of relational data and unstructured vector data, supporting hybrid retrieval of multi‑modal data.

Core Capability: Developers can complete semantic search, full‑text retrieval, and structured queries simultaneously with a single SQL statement, significantly lowering the development barrier and operational costs of AI applications. Kingware has built a full‑chain ecosystem matrix covering data integration → core storage → development and operations → hardware adaptation.

• DBA Perspective: The native integration of KingbaseES vector search means DBAs no longer need to maintain data synchronisation and consistency between relational databases and independent vector engines. The ability to complete semantic + full‑text + structured hybrid queries with a single SQL provides DBAs with a simplified data management path in AI application scenarios. Kingware’s full‑chain ecosystem matrix also provides DBAs with a reference framework for evaluating a vendor’s “AI‑readiness” in Xinchuang selection.

📚 SQL Little Knowledge Point

This Issue’s Knowledge Point: What is the Domestic Database “Tipping Point” Theory?

China Merchants Securities, in its analysis report, proposed that after the domestic database market share breaches 30% , it will reach a “tipping point” for accelerated replacement. This judgment is based on the following logic:

Three Drivers of the 30% Tipping Point:

1. Scale Effect: As the user base expands, product iteration accelerates, and the community and ecosystem mature rapidly.
2. “Anchoring Effect” Reversal: The cognitive threshold shifts from “taking a risk with domestic databases” to “taking a risk with non‑domestic databases.”
3. Core System Replacement Acceleration: After peripheral systems are validated, core system replacement enters the large‑scale phase.

Current Data: The domestic database software market share reached 26.89% in 2025, and is expected to breach the 30% tipping point in 2026. The combined share of Dameng, Renda Kingbase, and OceanBase has already exceeded 35%, with a clear head‑concentration effect.

Implications for DBAs: The tipping point means that DBA job demand in domestic databases will accelerate from “pilot projects” to “large‑scale replacement.” DBAs should proactively develop deep operations skills for leading domestic databases (Dameng, Kingbase, OceanBase, etc.).

HiddenMerit Team Production Slogan: 绩优隐于内，金石启新程 | Hidden deep. Merit bold. Forge ahead.