CWE-694 · Use of Multiple Resources with Duplicate Identifier
15 CVEs classified under CWE-694 (Use of Multiple Resources with Duplicate Identifier). Browse by severity and year.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-63976 | High | 8.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success l2cap_ecred_reconf_r… |
CVE-2025-13609 | High | 8.2 | 2025-11-24 | A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TP… |
CVE-2026-71327 | High | 8.1 | 2026-08-06 | Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/k… |
CVE-2025-59048 | High | 8.1 | 2025-10-23 | OpenBao's AWS Plugin generates AWS access credentials based on IAM policies. Prior to version 0.1.1, the AWS Plugin is vulnerable to cross-account IAM role Imp… |
CVE-2026-102634 | High | 7.5 | 2026-09-29 | SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /generate requests with Mooncake KV transfer b… |
CVE-2023-20100 | Medium | 6.8 | 2023-03-23 | A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol of Cisco IOS XE Software f… |
CVE-2026-78359 | Medium | 5.4 | 2026-10-12 | OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser backends. When multiple backends, such as… |
CVE-2026-57024 | Medium | 5.3 | 2026-07-09 | A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows… |
CVE-2024-41146 | Medium | 4.6 | 2024-12-12 | Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms could allow an attacker with physical access… |
CVE-2021-3436 | Medium | 4.3 | 2021-10-05 | BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known. Zephyr versions >= 1.14.2, >= 2.4.0… |
CVE-2026-108752 | Medium | 4.2 | 2026-10-11 | JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client b… |
CVE-2022-23721 | Low | 3.8 | 2023-04-25 | PingID integration for Windows login prior to 2.9 does not handle duplicate usernames, which can lead to a username collision when two people with the same use… |
CVE-2020-15187 | Low | 3.0 | 2020-09-17 | In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used. If a plugin is compromised, t… |
CVE-2020-15185 | Low | 2.2 | 2020-09-17 | In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compro… |
CVE-2026-5794 | | 2026-04-28 | A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending… |
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-78359 | Medium | 5.4 | 2026-10-12 | OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser backends. When multiple backends, such as… |
CVE-2026-108752 | Medium | 4.2 | 2026-10-11 | JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client b… |
CVE-2026-102634 | High | 7.5 | 2026-09-29 | SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /generate requests with Mooncake KV transfer b… |
CVE-2026-71327 | High | 8.1 | 2026-08-06 | Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/k… |
CVE-2026-63976 | High | 8.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success l2cap_ecred_reconf_r… |
CVE-2026-57024 | Medium | 5.3 | 2026-07-09 | A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows… |
CVE-2026-5794 | | 2026-04-28 | A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending… | |
CVE-2025-13609 | High | 8.2 | 2025-11-24 | A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TP… |
CVE-2025-59048 | High | 8.1 | 2025-10-23 | OpenBao's AWS Plugin generates AWS access credentials based on IAM policies. Prior to version 0.1.1, the AWS Plugin is vulnerable to cross-account IAM role Imp… |
CVE-2024-41146 | Medium | 4.6 | 2024-12-12 | Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms could allow an attacker with physical access… |
CVE-2022-23721 | Low | 3.8 | 2023-04-25 | PingID integration for Windows login prior to 2.9 does not handle duplicate usernames, which can lead to a username collision when two people with the same use… |
CVE-2023-20100 | Medium | 6.8 | 2023-03-23 | A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol of Cisco IOS XE Software f… |
CVE-2021-3436 | Medium | 4.3 | 2021-10-05 | BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known. Zephyr versions >= 1.14.2, >= 2.4.0… |
CVE-2020-15187 | Low | 3.0 | 2020-09-17 | In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used. If a plugin is compromised, t… |
CVE-2020-15185 | Low | 2.2 | 2020-09-17 | In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compro… |