Memcached SASL Flaw Exposes Usernames to Enumeration Attacks

Gbhackers •Divya • May 26, 2026

A newly identified vulnerability in Memcached has raised concerns among security professionals after researchers confirmed a timing side-channel flaw that allows attackers to enumerate valid usernames. Tracked as CVE-2026-47783, the issue affects Memcached versions before 1.6.42 and specifically impacts SASL (Simple Authentication and Security Layer) password database authentication. The flaw stems from improper username validation […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Memcached SASL Vulnerability Allows Username Enumeration Attacks A timing side-channel vulnerability in Memcached's SASL authentication mechanism, tracked as CVE-2026-47783, has been disclosed. This flaw affects versions prior to 1.6.42 and enables attackers to enumerate valid usernames. The vulnerability was confirmed by researchers and poses a significant risk to systems using Memcached for password database authentication. The flaw was addressed in the latest release, which includes multiple critical bug fixes. Security professionals are urged to update their systems to mitigate potential exploitation. The vulnerability was published on May 20, 2026. 3 sources 58

Extracted Entities

Memcached SASL Flaw Exposes Usernames to Enumeration Attacks

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)