CVE Intelligence

Memcached vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Memcached products: 2 record(s), with severity, exploitation and fixes.

Memcached 2

Exploited only (KEV) →

CVE-2026-47784 High · 8.1 CWE-208 May 20, 2026
In memcached before 1.6.42, password data for SASL password database authentication has…
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
CVE-2026-47783 High · 8.1 CWE-208 May 20, 2026
In memcached before 1.6.42, username data for SASL password database authentication has…
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.