Ubuntu Memcached SASL Vulnerability Allows Username Enumeration Attacks
Article Content
- •CVE-2026-47783 allows username enumeration via a timing side-channel attack.
- •Affected versions of Memcached are those prior to 1.6.42.
- •The vulnerability was patched in the recent Memcached update released on May 20, 2026.
A timing side-channel vulnerability in Memcached's SASL authentication mechanism, tracked as CVE-2026-47783, has been disclosed. This flaw affects versions prior to 1.6.42 and enables attackers to enumerate valid usernames. The vulnerability was confirmed by researchers and poses a significant risk to systems using Memcached for password database authentication. The flaw was addressed in the latest release, which includes multiple critical bug fixes. Security professionals are urged to update their systems to mitigate potential exploitation. The vulnerability was published on May 20, 2026.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (8)
Following this threat?
Track CVE-2026-47783 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…