CWE-694 · Injection and Smuggling
Use of Multiple Resources with Duplicate Identifier
17CVEs
SortMost likely exploited
17 CVEs with CWE-694 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-15187Duplicate plugin entries in Helmhelm · helm · CVSS 3 · 2020-09-17 | 3.0 | 1.5% | 2020-09-17 |
| CVE-2021-3436BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is knownzephyrproject-rtos · zephyr · CVSS 4.3 · 2021-10-05 | 4.3 | 1.0% | 2021-10-05 |
| CVE-2020-15185Duplicated chart entries in Helmhelm · helm · CVSS 2.2 · 2020-09-17 | 2.2 | 0.9% | 2020-09-17 |
| CVE-2023-20100Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service VulnerabilityCisco · Cisco IOS XE Software · CVSS 6.8 · 2023-03-23 | 6.8 | 0.8% | 2023-03-23 |
| CVE-2026-102634SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_roomsgl-project · sglang · CVSS 7.5 · 2026-09-29 | 7.5 | 0.6% | 2026-09-29 |
| CVE-2026-63976Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration successLinux · Linux · CVSS 8.8 · 2026-07-19 | 8.8 | 0.6% | 2026-07-19 |
| CVE-2026-71327Traefik: Gateway API route identity collision allows cross-namespace backend hijackingtraefik · traefik · CVSS 7.6 · 2026-08-06 | 7.6 | 0.5% | 2026-08-06 |
| CVE-2025-13609Keylime: keylime: registrar allows identity takeover via duplicate uuid registrationKeylime Project · keylime · CVSS 8.2 · 2025-11-24 | 8.2 | 0.5% | 2025-11-24 |
| CVE-2026-114643Duplicate geometry fields via unvalidated GeoJSON extra membersMongoDB · C# Driver · CVSS 5.4 · 2026-10-22 | 5.4 | 0.4% | 2026-10-22 |
| CVE-2026-57024Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuouslyJuniper Networks · Junos OS · CVSS 5.3 · 2026-07-09 | 5.3 | 0.4% | 2026-07-09 |
| CVE-2024-41146Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms could allow an attacker with physical access to HBUS communicati…Gallagher · Controller 6000 and Controller 7000 · CVSS 4.6 · 2024-12-12 | 4.6 | 0.3% | 2024-12-12 |
| CVE-2026-5794Vulnerability in Cryptobox allows an authenticated user to trigger an account lockoutErcom · Cryptobox · CVSS 4.9 · 2026-04-28 | 4.9 | 0.3% | 2026-04-28 |
| CVE-2026-108752JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphenjupyterhub · jupyterhub · CVSS 4.2 · 2026-10-11 | 4.2 | 0.2% | 2026-10-11 |
| CVE-2026-115289Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information DisclosureElastic · APM Server · CVSS 4.3 · 2026-11-03 | 4.3 | 0.2% | 2026-11-03 |
| CVE-2022-23721PingID integration for Windows login duplicate username collision.Ping Identity · CVSS 3.8 · 2023-04-25 | 3.8 | 0.2% | 2023-04-25 |
| CVE-2026-112906filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reusetox-dev · filelock · CVSS 4.7 · 2026-10-20 | 4.7 | 0.2% | 2026-10-20 |
| CVE-2026-78359Duplicate Identity / Identity Shadowing across CustomerUser backendsOTRS GmbH (former OTRS AG) · OTRS · CVSS 5.4 · 2026-10-12 | 5.4 | 0.2% | 2026-10-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.