Skip to main content

Memcached CVE-2026-47783

| EUVDEUVD-2026-31065 HIGH
Observable Timing Discrepancy (CWE-208)
2026-05-20 mitre GHSA-qjpx-j6j4-8xpr
Information Disclosure Memcached
8.1
CVSS 3.1 · Vendor: mitre
View

Vulnerability Assessment

Weakness
CWE
CWE-208
ASVS 5.0
V6 - Authentication Timing attack prevention
This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).
Patch available 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – May 20, 2026

Observable timing discrepancy in memcached prior to version 1.6.42 enables remote attackers to enumerate valid SASL authentication usernames by measuring response time differences. The vulnerable sasl_server_userdb_checkpass function exits its credential-file loop early upon matching a valid username, producing measurable timing variance between known and unknown accounts. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.

Affected VersionsENISA

Memcached 0 <1.6.42

Affected Packages

euvd memcached fix: 1.6.42

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check

Know when Memcached gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (mitre) PRIMARY 8.1 HIGH
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
SUSE HIGH
Red Hat 8.1 HIGH

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
Patch available
May 20, 2026 - 07:01 EUVD

DescriptionCVE.org

In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.

Executive ViewAI

Why It Matters

Memcached versions prior to 1.6.42 contain a timing-side-channel vulnerability in SASL authentication that enables attackers to distinguish valid usernames from invalid ones by measuring response latency. This information disclosure significantly reduces the effort required to execute credential-stuffing and brute-force attacks. Organizations deploying memcached for cache layers supporting authentication systems should prioritize mitigation given the ease of exploitation and absence of a vendor patch.

Recommended Action

Within 24 hours: Audit all memcached deployments to identify version numbers and document which systems use SASL authentication. Within 7 days: Implement network segmentation to restrict memcached access to authorized application servers only; disable inbound connectivity from untrusted networks. Within 30 days: Subscribe to memcached vendor security advisories; establish an upgrade plan for version 1.6.42 or later once available; conduct security testing before production deployment.

Business Impact: High
Compensating Controls

Restrict network access to memcached services from authorized hosts only; implement per-connection rate limiting to slow username enumeration attempts; enable SASL authentication logging with alerts for repeated failed attempts; consider disabling SASL if not operationally required; deploy separate memcached instances with non-sensitive data on restricted networks.

Threat Intelligence Overview

EPSS Score
0.1%
Top 83% exploitable
Data Quality
8 sources
Confidence: High
EUVD NVD CVE.org EPSS Vulnrichment MSRC Vendor GitHub VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC No
EPSS 0.1%
Patch available Yes
Active threat No
Deciding rule
HIGH severity (CVSS 7.0-8.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision
Scheduled
Exploitation
None
System Exposure· derived
Open
Automatable
No
Human Impact
High
Technical Impact
Total

Priority Score

40
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +40
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

More in Memcached

View all
CVE-2016-8706 HIGH POC
8.1 Jan 06

An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of

CVE-2016-8704 CRITICAL POC
9.8 Jan 06

An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multipl
CVE-2016-8705 CRITICAL POC
9.8 Jan 06

Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple com
CVE-2022-26635 CRITICAL POC
9.8 Apr 05

PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute CLRF injection. R
CVE-2017-9951 HIGH POC
7.5 Jul 17

The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of ser
CVE-2020-10931 HIGH POC
7.5 Mar 24

Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary pr
CVE-2019-11596 HIGH POC
7.5 Apr 29

In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. Rated hi
CVE-2018-1000115 HIGH POC
7.5 Mar 05

Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vuln
CVE-2023-46853 CRITICAL
9.8 Oct 27

In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used inste
CVE-2026-90698 MEDIUM POC
5.5 Sep 14

Out-of-bounds read in memcached versions 1.6.41-1.6.43 allows a remote, unauthenticated attacker to crash the ASCII auth
CVE-2026-47784 HIGH
8.1 May 20

Timing side-channel in memcached versions prior to 1.6.42 allows remote attackers to recover SASL authentication credent
CVE-2023-46852 HIGH
7.5 Oct 27

In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many

Same weakness CWE-208 – Observable Timing Discrepancy

View all
CVE-2026-23519 CRITICAL POC
9.8
CVE-2024-47178 HIGH POC
8.7
CVE-2026-69247 HIGH POC
8.2
CVE-2026-54736 HIGH POC
8.2
CVE-2025-68621 HIGH POC
7.4
CVE-2026-77582 MEDIUM POC
6.9
CVE-2026-88010 MEDIUM POC
6.3
CVE-2024-54772 MEDIUM POC
5.4

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2025-68613 HIGH POC
8.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5

Vendor StatusVendor

SUSE

Severity: High
Product Status
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed
SUSE Linux Enterprise Module for Server Applications 15 SP7 Fixed
SUSE Linux Enterprise Server 15 SP7 Fixed
SUSE Linux Enterprise Server 16.0 Fixed
SUSE Linux Enterprise Server 16.1 Fixed

References

Advisories & patches
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-47783 ADVISORY https://vuldb.com/vuln/364828 REF https://access.redhat.com/errata/RHSA-2026:27842 REF https://access.redhat.com/errata/RHSA-2026:27862 REF https://access.redhat.com/security/cve/CVE-2026-47783 REF https://bugzilla.redhat.com/show_bug.cgi?id=2480089 REF https://github.com/memcached/memcached/commit/d13f282b4bce33a9c33b8a1bbf07f12114160fed REF https://github.com/memcached/memcached/compare/1.6.41...1.6.42 REF https://github.com/memcached/memcached/wiki/ReleaseNotes1642 REF https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47783.json

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy