PT-2026-42109 · Memcached+3 · Memcached+3

Kingroryga · CVE-2026-47783 · Published 2026-05-20 · Updated 2026-06-30

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions memcached versions prior to 1.6.42

Description Username data for SASL password database authentication contains a timing side channel. This occurs because the sasl server userdb checkpass() function utilizes a loop that terminates immediately upon finding a valid username, allowing an attacker to potentially infer valid usernames based on the time the server takes to respond.

Recommendations Update to version 1.6.42 or later.

Exploit

Fix

Weakness Enumeration

CWE-208

Related Identifiers

ALSA-2026:27842

ALSA-2026:27862

BIT-MEMCACHED-2026-47783

CVE-2026-47783

OPENSUSE-SU-2026:10882-1

OPENSUSE-SU-2026:20884-1

RHSA-2026:27842

RHSA-2026:27862

SUSE-SU-2026:22022-1

SUSE-SU-2026:2292-1

SUSE-SU-2026:2293-1

USN-8320-1

Affected Products

Linuxmint

Rocky Linux

Ubuntu

Memcached

References · 44

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47783.json · Exploit
• https://github.com/memcached/memcached/commit/d13f282b4bce33a9c33b8a1bbf07f12114160fed · Patch
• https://access.redhat.com/errata/RHSA-2026:27842 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-47783 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:27842 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8320-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-47783 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-27862.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:22022-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:27862 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-47783 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-47783 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:27862 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10882-1 · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2026-27842.html · Vendor Advisory