CVE-2026-47784

Red Hat mitigation

To mitigate this issue, restrict network access to the memcached service to only trusted clients and networks using firewall rules. If SASL authentication is not strictly required, consider disabling it. If SASL is necessary, ensure that strong, unique passwords are used and rotated regularly. Example firewall rule (adjust port and source as needed): `firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="<TRUSTED_IP_RANGE>" port port="11211" protocol="tcp" accept'` `firewall-cmd --reload` To bind memcached to localhost, edit `/etc/sysconfig/memcached` and set `OPTIONS="-l 127.0.0.1"`. Restart the memcached service: `systemctl restart memcached` Note that restarting the memcached service will clear all cached data.