Critical severity9.8NVD Advisory· Published Apr 5, 2022· Updated Jun 17, 2026

CVE-2022-26635

Description

PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute CLRF injection. Note: Third parties have disputed this as not affecting PHP-Memcached directly.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PHP/Memcached
cpe:2.3:a:php:memcached:*:*:*:*:*:*:*:*
Range: <=2.2.0
PHP-Memcached/PHP-Memcacheddescription
Memcached/Memcachedllm-fuzzy
Range: <=2.2.0

Patches

Vulnerability mechanics

References

xhzeem.me/posts/Php5-memcached-Injection-Bypass/read/nvdExploitThird Party Advisory
github.com/php-memcached-dev/php-memcached/issues/519nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.017
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000