https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-46853.htmlhttps://patchthecve.com/cve/CVE-2023-46853.htmlWed, 17 Jun 2026 06:31:46 +0000CRITICAL 9.8: In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n.https://patchthecve.com/cve/CVE-2023-46852.htmlhttps://patchthecve.com/cve/CVE-2023-46852.htmlWed, 17 Jun 2026 06:31:46 +0000HIGH 7.5: In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the "get" substring.https://patchthecve.com/cve/CVE-2022-48571.htmlhttps://patchthecve.com/cve/CVE-2022-48571.htmlWed, 17 Jun 2026 05:15:37 +0000HIGH 7.5: memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP.https://patchthecve.com/cve/CVE-2020-22570.htmlhttps://patchthecve.com/cve/CVE-2020-22570.htmlWed, 17 Jun 2026 03:04:17 +0000HIGH 7.5: Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted meta command.https://patchthecve.com/cve/CVE-2021-37519.htmlhttps://patchthecve.com/cve/CVE-2021-37519.htmlWed, 17 Jun 2026 04:00:40 +0000MEDIUM 5.5: Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file.https://patchthecve.com/cve/CVE-2022-26635.htmlhttps://patchthecve.com/cve/CVE-2022-26635.htmlWed, 17 Jun 2026 04:35:33 +0000CRITICAL 9.8: PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute CLRF injection. Note: Third parties have disputed this as not affecting PHP-Memcached directly.https://patchthecve.com/cve/CVE-2020-10931.htmlhttps://patchthecve.com/cve/CVE-2020-10931.htmlWed, 17 Jun 2026 02:48:42 +0000HIGH 7.5: Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to try_read_command_binary in memcached.c.