Memcached — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Operation PowerOFF Targets 75,000 DDoS-for-Hire Users Worldwide

  On April 13, 2026, a coordinated international law enforcement operation named 'Operation PowerOFF' targeted the DDoS-for-hire ecosystem, resulting in the takedown of 53 domains and the arrest of four individuals.…

  20 articles · Updated April 16, 2026
• Memcached SASL Vulnerability Allows Username Enumeration Attacks

  A timing side-channel vulnerability in Memcached's SASL authentication mechanism, tracked as CVE-2026-47783, has been disclosed. This flaw affects versions prior to 1.6.42 and enables attackers to enumerate valid…

  3 articles · Updated May 26, 2026
• Multiple Vulnerabilities Discovered in Memcached Prior to Version 1.6.22

  Two vulnerabilities have been identified in Memcached versions prior to 1.6.22. CVE-2023-46853 involves an off-by-one error when processing proxy requests using incorrect line endings, while CVE-2023-46852 is a buffer…

  2 articles · Updated February 18, 2026

Recent Intelligence Reports

• Critical Memcached SASL Vulnerability Let Attackers Infer Valid Usernames — Cybersecuritynews · May 26, 2026
• Memcached SASL Flaw Exposes Usernames to Enumeration Attacks — Gbhackers · May 26, 2026
• Cloudflare said it mitigated — www.cloudflare.com · April 16, 2026
• CVE-2023-46853 In Memcached before 1.6.22 an off-by-one error exists when processing proxy requests in proxy mode if \n is used instead of \r\n. — Api.Msrc.Microsoft · February 18, 2026
• CVE-2023-46852 In Memcached before 1.6.22 a buffer overflow exists when processing multiget requests in proxy mode if there are many spaces after the "get" substring. — Api.Msrc.Microsoft · February 18, 2026

Related Entities