Frame Desynchronization and Response Smuggling in Memcache by Red Hat
CVE-2026-93561

Currently unrated

Key Information:

Vendor: Red Hat
Status: Red Hat Build Of Apache Camel For Spring Boot 4; Red Hat Fuse 7; Red Hat Jboss Enterprise Application Platform 7; Red Hat Single Sign-on 7
Vendor: CVE Published:; 18 September 2026

What is CVE-2026-93561?

The vulnerability in Memcache involves a signed/unsigned type mismatch within the binary codec, which leads to potential frame desynchronization and response smuggling exploits. This issue can enable attackers to manipulate stored data and potentially inject malicious responses, undermining the integrity of system communications.

References

https://access.redhat.com/security/cve/CVE-2026-93561

vdb-entryx_refsource_REDHAT

https://bugzilla.redhat.com/show_bug.cgi?id=2536949

issue-trackingx_refsource_REDHAT

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 18, 2026
Vulnerability Reserved
Sep 18, 2026

CVE-2026-93561 Data

JSON