CVE-2026-46690

unbounded_spsc is an "unbounded" extension of bounded_spsc_queue. In versions 0.2.0 and prior, sender::send pointer-as-value transmute causes OOB read and fake-Arc drop under TX/RX race. At time of publication, there are no publicly available patches.

• CWE-125
• CWE-415
• CWE-704
• CWE-787

• https://github.com/spearman/unbounded-spsc/security/advisories/GHSA-6m57-8r3p-pqx6Exploit, Vendor Advisory
• https://github.com/spearman/unbounded-spsc/security/advisories/GHSA-6m57-8r3p-pqx6Exploit, Vendor Advisory

Published

Jun 12, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-46684DataEase is an open source data visualization and analysis t…9.5
• CVE-2026-46685RustFS is a distributed object storage system built in Rust.…6
• CVE-2026-46686Emlog is an open source website building system. In 2.6.13 a…8.5
• CVE-2026-46687Emlog is an open source website building system. In 2.6.13 a…7.7
• CVE-2026-46688The Meeting Room Booking System (MRBS) is a PHP-based applic…6.9
• CVE-2026-46689Kanidm is an identity management platform. Prior to version …8.7
• CVE-2026-46692ImageMagick is free and open-source software used for editin…4.1
• CVE-2026-46693ImageMagick is free and open-source software used for editin…4.1
• CVE-2026-46695Boxlite is a sandbox service that allows users to create lig…10
• CVE-2026-46696October System provides the system module for October Conten…3.3
• CVE-2026-46697Fediverse Embeds embeds fediverse posts on WordPress sites. …7.5
• CVE-2026-46698Fediverse Embeds embeds fediverse posts on WordPress sites. …5.3