8.1 HighCWE-208
CVE-2026-47783
memcached vulnerability
Status
- Not in CISA KEV
- Fixed in version 1.6.42
Exploit probabilityEPSSchecked 25 Oct
1.3%probability of exploitation in the next 30 days
Higher than 69% of scored CVEs
SeverityCVSS
8.1High
Description NVD
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.
Coverage 1 article · 1 outlet
- Critical Memcached SASL Vulnerability Fixed in Version 1.6.42SecurityOnline · first in our coverage