CWE-694 · 12 records

Use of Multiple Resources with Duplicate Identifier

CVEs in this class

12 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-102634No exploit	SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_roomsgl-project · sglang · CWE-694 Pre-auth	High8.7	—	0.5%	Sep 29, 2026
32Monitor	CVE-2025-13609No exploit	Keylime: keylime: registrar allows identity takeover via duplicate uuid registrationkeylime project · keylime · CWE-694	High8.2	—	0.4%	Nov 24, 2025
32Monitor	CVE-2025-59048No exploit	OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Methodopenbao · aws plugin · CWE-694	High8.1	—	0.2%	Oct 23, 2025
30Monitor	CVE-2026-71327No exploit	Traefik: Gateway API route identity collision allows cross-namespace backend hijackingtraefik · traefik · CWE-694	High7.6	—	0.4%	Aug 6, 2026
27Monitor	CVE-2023-20100No exploit	Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerabilitycisco · ios xe · CWE-694 Pre-auth Denial of service	Medium6.8	—	0.7%	Mar 23, 2023
27Monitor	CVE-2026-57024No exploit	Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuouslyjuniper · junos · CWE-694 Pre-auth	Medium6.9	—	0.4%	Jul 9, 2026
26Monitor	CVE-2021-3436No exploit	BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is knownzephyrproject · zephyr · CWE-694 Pre-auth	Medium6.5	—	0.9%	Oct 5, 2021
21Monitor	CVE-2026-78359No exploit	Duplicate Identity / Identity Shadowing across CustomerUser backendsotrs gmbh (former otrs ag) · otrs · CWE-694	Medium5.4	—	0.1%	4 days ago
19Monitor	CVE-2026-5794No exploit	Vulnerability in Cryptobox allows an authenticated user to trigger an account lockoutercom · cryptobox · CWE-694	Medium4.9	—	0.3%	Apr 28, 2026
18Monitor	CVE-2024-41146No exploit	Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms could allow an attacker wgallagher · controller 6000 and controller 7000 · CWE-694 Denial of service	Medium4.6	—	0.3%	Dec 11, 2024
13Monitor	CVE-2022-23721No exploit	PingID integration for Windows login duplicate username collision.pingidentity · pingid integration for windows login · CWE-694 Denial of service	Low3.3	—	0.2%	Apr 25, 2023
9Monitor	CVE-2026-108752No exploit	JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphenjupyterhub · jupyterhub · CWE-694	Low2.3	—	0.2%	5 days ago

CVE-2026-102634
34Monitor
SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
sgl-project · sglangSep 29, 2026
CVE-2025-13609
32Monitor
Keylime: keylime: registrar allows identity takeover via duplicate uuid registration
HighCVSS 8.2No exploitEPSS 0%
keylime project · keylimeNov 24, 2025
CVE-2025-59048
32Monitor
OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method
HighCVSS 8.1No exploitEPSS 0%
openbao · aws pluginOct 23, 2025
CVE-2026-71327
30Monitor
Traefik: Gateway API route identity collision allows cross-namespace backend hijacking
HighCVSS 7.6No exploitEPSS 0%
traefik · traefikAug 6, 2026
CVE-2023-20100
27Monitor
Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability
MediumCVSS 6.8No exploitEPSS 0%
- Pre-auth
- Denial of service
cisco · ios xeMar 23, 2023
CVE-2026-57024
27Monitor
Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
juniper · junosJul 9, 2026
CVE-2021-3436
26Monitor
BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
zephyrproject · zephyrOct 5, 2021
CVE-2026-78359
21Monitor
Duplicate Identity / Identity Shadowing across CustomerUser backends
MediumCVSS 5.4No exploitEPSS 0%
otrs gmbh (former otrs ag) · otrs4 days ago
CVE-2026-5794
19Monitor
Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout
MediumCVSS 4.9No exploitEPSS 0%
ercom · cryptoboxApr 28, 2026
CVE-2024-41146
18Monitor
Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms could allow an attacker w
MediumCVSS 4.6No exploitEPSS 0%
- Denial of service
gallagher · controller 6000 and controller 7000Dec 11, 2024
CVE-2022-23721
13Monitor
PingID integration for Windows login duplicate username collision.
LowCVSS 3.3No exploitEPSS 0%
- Denial of service
pingidentity · pingid integration for windows loginApr 25, 2023
CVE-2026-108752
9Monitor
JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen
LowCVSS 2.3No exploitEPSS 0%
jupyterhub · jupyterhub5 days ago

All vulnerability classes