CVE-2026-47784
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
Published Updated
PatchFirst · Latest vulnerabilities
memcached vulnerabilities
Vulnerabilities published for memcached in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 4
CVE-2026-47783
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.
Published UpdatedCVE-2022-48571
memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP.
- Update to 1.5.22-2ubuntu0.3
Published UpdatedCVE-2021-37519
Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file.
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.