EIP-2026-102675

PRE-CVE

Memcached 1.5.5 - 'Memcrashed' Insufficient Control Network Message Volume Denial of Service (2)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102675. PoCs published by Alex Conrey.

AI-analyzed exploit summary This exploit targets vulnerable memcached servers to perform a UDP-based amplification attack (DoS). It fetches or sets keys and sends crafted packets to reflect traffic to a target, leveraging the memcached protocol.

Description

Memcached 1.5.5 - 'Memcrashed' Insufficient Control Network Message Volume Denial of Service (2)

Exploits (1)

exploitdb WORKING POC
by Alex Conrey · pythondoslinux
https://www.exploit-db.com/exploits/44254

This exploit targets vulnerable memcached servers to perform a UDP-based amplification attack (DoS). It fetches or sets keys and sends crafted packets to reflect traffic to a target, leveraging the memcached protocol.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: memcached (versions with unauthenticated UDP support)
No auth needed
Prerequisites: Access to vulnerable memcached servers with UDP enabled · Network connectivity to the target
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026