CVE Intelligence

Memcached Memcached vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Memcached Memcached: 2 record(s), with affected versions and fixes.
cpe:2.3:a:memcached:memcached

CVE-2026-47784 High · 8.1 CWE-208 May 20, 2026
In memcached before 1.6.42, password data for SASL password database authentication has…
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
CVE-2026-47783 High · 8.1 CWE-208 May 20, 2026
In memcached before 1.6.42, username data for SASL password database authentication has…
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.