CVE-2026-47784
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
- Update to 1.6.38-1ubuntu0.1
Published Updated
PatchFirst · Latest vulnerabilities
memcached vulnerabilities
Vulnerabilities published for memcached in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2026-47783
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.
- Update to 1.6.38-1ubuntu0.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.