CVE-2026-47784
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
Published Updated
PatchFirst · Latest vulnerabilities
memcached vulnerabilities
Vulnerabilities published for memcached in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 3
CVE-2026-47783
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.
Published UpdatedCVE-2022-48571
memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP.
- Update to 1.4.25-2ubuntu1.5+esm1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.