CVE-2026-90698

A flaw was found in memcached. A remote attacker could exploit an out-of-bounds read vulnerability in the try_read_command_asciiauth function. This could lead to a Denial of Service (DoS) condition, making the service unavailable to legitimate users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To reduce exposure, restrict network access to the memcached service. Configure memcached to listen only on trusted interfaces or localhost, preventing remote attackers from reaching the vulnerable component. For example, modify the memcached service configuration to bind to 127.0.0.1 or a specific internal IP address. A service restart is required for changes to take effect and may temporarily impact services utilizing memcached.