CVE-2026-47783

Name of the Vulnerable Software and Affected Versions memcached versions prior to 1.6.42

Description Username data for SASL password database authentication contains a timing side channel. This occurs because the sasl server userdb checkpass() function utilizes a loop that terminates immediately upon finding a valid username, allowing an attacker to potentially infer valid usernames based on the time the server takes to respond.

Recommendations Update to version 1.6.42 or later.