CVE-2023-46853: Memcached

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n.

Affected products

• Memcached Memcached: before 1.6.22 (fixed in 1.6.22)

Published 2023-10-27. Last modified 2026-06-17.