Frame Desynchronization and Response Smuggling in Memcache by Red Hat
CVE-2026-93561

6.5MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Build Of Apache Camel For Spring Boot 4
Red Hat Fuse 7
Red Hat Jboss Enterprise Application Platform 7
Red Hat Single Sign-on 7
Vendor
CVE Published:
18 September 2026

What is CVE-2026-93561?

The vulnerability in Memcache involves a signed/unsigned type mismatch within the binary codec, which leads to potential frame desynchronization and response smuggling exploits. This issue can enable attackers to manipulate stored data and potentially inject malicious responses, undermining the integrity of system communications.

References

https://access.redhat.com/security/cve/CVE-2026-93561
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2536949
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.