← Database

CVE-2026-47783

HIGH CVSS: 8.1 Published: 2026-05-20 Modified: 2026-08-17

Description

In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.

Affected Platforms

Memcached Memcached

Weakness Type

CWE-208, CWE-208

References