CWE-694
18 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 18Published CVEs18 of them scored
- 11Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-115289
Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure
Elastic · APM Server
Medium4.3 - CVE-2026-114643
Duplicate geometry fields via unvalidated GeoJSON extra members
MongoDB · C# Driver
Medium5.3 - CVE-2026-112906
filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse
tox-dev · filelock
Medium4.7 - CVE-2026-78359
Duplicate Identity / Identity Shadowing across CustomerUser backends
OTRS GmbH (former OTRS AG) · OTRS
Medium5.4 - CVE-2026-108752
JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen
jupyterhub · jupyterhub
Low2.3 - CVE-2026-102634
SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room
sgl-project · sglang
High8.7 - CVE-2026-71327
Traefik: Gateway API route identity collision allows cross-namespace backend hijacking
traefik · traefik
High7.6 - CVE-2026-63976
Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success
Linux · Linux
High8.8 - CVE-2026-57024
Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously
Juniper Networks · Junos OS
Medium6.9 - CVE-2026-5794
Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout
Ercom · Cryptobox
Medium4.9