Memcached: community verdicts
2 notable / known-exploited Memcached CVEs the community has triaged.
ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Memcached CVE, see NVD ↗.
- CVE-2026-47783HIGH 8.1Real · low riskEPSS 1%
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.
- CVE-2026-47784HIGH 8.1Real · low riskEPSS 1%
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.