CWE-694 · 10 records

Use of Multiple Resources with Duplicate Identifier

CVEs in this class

10 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-102634No exploit	SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_roomsgl-project · sglang · CWE-694 Pre-auth	High8.7	—	—	Today
32Monitor	CVE-2025-13609No exploit	Keylime: keylime: registrar allows identity takeover via duplicate uuid registrationkeylime project · keylime · CWE-694	High8.2	—	0.4%	Nov 24, 2025
32Monitor	CVE-2025-59048No exploit	OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Methodopenbao · aws plugin · CWE-694	High8.1	—	0.3%	Oct 23, 2025
30Monitor	CVE-2026-71327No exploit	Traefik: Gateway API route identity collision allows cross-namespace backend hijackingtraefik · traefik · CWE-694	High7.6	—	0.5%	Aug 6, 2026
27Monitor	CVE-2023-20100No exploit	Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerabilitycisco · ios xe · CWE-694 Pre-auth Denial of service	Medium6.8	—	0.8%	Mar 23, 2023
27Monitor	CVE-2026-57024No exploit	Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuouslyjuniper · junos · CWE-694 Pre-auth	Medium6.9	—	0.4%	Jul 9, 2026
26Monitor	CVE-2021-3436No exploit	BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is knownzephyrproject · zephyr · CWE-694 Pre-auth	Medium6.5	—	1.0%	Oct 5, 2021
19Monitor	CVE-2026-5794No exploit	Vulnerability in Cryptobox allows an authenticated user to trigger an account lockoutercom · cryptobox · CWE-694	Medium4.9	—	0.4%	Apr 28, 2026
18Monitor	CVE-2024-41146No exploit	Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms could allow an attacker wgallagher · controller 6000 and controller 7000 · CWE-694 Denial of service	Medium4.6	—	0.3%	Dec 11, 2024
13Monitor	CVE-2022-23721No exploit	PingID integration for Windows login duplicate username collision.pingidentity · pingid integration for windows login · CWE-694 Denial of service	Low3.3	—	0.2%	Apr 25, 2023

CVE-2026-102634
34Monitor
SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room
HighCVSS 8.7No exploit
- Pre-auth
sgl-project · sglangToday
CVE-2025-13609
32Monitor
Keylime: keylime: registrar allows identity takeover via duplicate uuid registration
HighCVSS 8.2No exploitEPSS 0%
keylime project · keylimeNov 24, 2025
CVE-2025-59048
32Monitor
OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method
HighCVSS 8.1No exploitEPSS 0%
openbao · aws pluginOct 23, 2025
CVE-2026-71327
30Monitor
Traefik: Gateway API route identity collision allows cross-namespace backend hijacking
HighCVSS 7.6No exploitEPSS 0%
traefik · traefikAug 6, 2026
CVE-2023-20100
27Monitor
Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability
MediumCVSS 6.8No exploitEPSS 1%
- Pre-auth
- Denial of service
cisco · ios xeMar 23, 2023
CVE-2026-57024
27Monitor
Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
juniper · junosJul 9, 2026
CVE-2021-3436
26Monitor
BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
zephyrproject · zephyrOct 5, 2021
CVE-2026-5794
19Monitor
Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout
MediumCVSS 4.9No exploitEPSS 0%
ercom · cryptoboxApr 28, 2026
CVE-2024-41146
18Monitor
Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms could allow an attacker w
MediumCVSS 4.6No exploitEPSS 0%
- Denial of service
gallagher · controller 6000 and controller 7000Dec 11, 2024
CVE-2022-23721
13Monitor
PingID integration for Windows login duplicate username collision.
LowCVSS 3.3No exploitEPSS 0%
- Denial of service
pingidentity · pingid integration for windows loginApr 25, 2023

All vulnerability classes