# CWE-694. Every Advisory and CVE whose sources give the weakness CWE-694, newest first. ## Records, newest first - [Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure](https://agentprime.io/advisories/CVE-2026-115289.md) `CVE-2026-115289` · CVE record: Elastic APM Server · CVSS 4.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-694 - [filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse](https://agentprime.io/advisories/GHSA-2g95-wg33-c5x2.md) `GHSA-2g95-wg33-c5x2`, `CVE-2026-112906` · PyPI `filelock`: affected `>=4.1.0, <4.2.1`, fixed in `4.2.1` · CVSS 4.7 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-694 - [Duplicate geometry fields via unvalidated GeoJSON extra members](https://agentprime.io/advisories/CVE-2026-114643.md) `CVE-2026-114643` · CVE record: MongoDB C# Driver · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-694 - [Duplicate Identity / Identity Shadowing across CustomerUser backends](https://agentprime.io/advisories/CVE-2026-78359.md) `CVE-2026-78359` · CVE record: OTRS GmbH (former OTRS AG) OTRS and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-694, CWE-706 - [JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen](https://agentprime.io/advisories/CVE-2026-108752.md) `CVE-2026-108752` · CVE record: jupyterhub jupyterhub · CVSS 2.3 Low · Not analysed yet · Published 11 Oct 2026 · Tags: CWE-694 - [SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room](https://agentprime.io/advisories/CVE-2026-102634.md) `CVE-2026-102634` · CVE record: sgl-project sglang · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-694 - [Traefik: Gateway API route identity collision allows cross-namespace backend hijacking](https://agentprime.io/advisories/GHSA-fgjj-px3w-67xx.md) `GHSA-fgjj-px3w-67xx`, `CVE-2026-71327`, `GO-2026-6209` · Go `github.com/traefik/traefik/v3`: affected `>=3.0.0, <3.6.25 || >=3.7.0, <3.7.10`, fixed in `3.6.25`, `3.7.10` · CVSS 7.6 High · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-694 - [Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success](https://agentprime.io/advisories/CVE-2026-63976.md) `CVE-2026-63976` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 19 Jul 2026 · Tags: CWE-694 - [Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously](https://agentprime.io/advisories/CVE-2026-57024.md) `CVE-2026-57024` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-694 - [Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout](https://agentprime.io/advisories/CVE-2026-5794.md) `CVE-2026-5794` · CVE record: Ercom Cryptobox · CVSS 4.9 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: CWE-694 - [A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TPM) device but claiming an existing age...](https://agentprime.io/advisories/GHSA-xh5w-g8gq-r3v9.md) `GHSA-xh5w-g8gq-r3v9`, `CVE-2025-13609`, `PYSEC-2025-77` · PyPI `keylime`: affected , no fixed version yet · CVSS 8.2 High · Not analysed yet · Published 24 Nov 2025 · Tags: CWE-694 - [OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method](https://agentprime.io/advisories/GHSA-jp7h-4f3c-9rc7.md) `GHSA-jp7h-4f3c-9rc7`, `CVE-2025-59048`, `GO-2025-4067` · Go `github.com/openbao/openbao-plugins`: affected `<0.1.1`, fixed in `0.1.1` · CVSS 8.1 High · Not analysed yet · Published 23 Oct 2025 · Tags: Broken access control, CWE-694 - [Gallagher Controller 6000 and Controller 7000: Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and…](https://agentprime.io/advisories/CVE-2024-41146.md) `CVE-2024-41146` · CVE record: Gallagher Controller 6000 and Controller 7000 · CVSS 4.6 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-694 - [PingID integration for Windows login duplicate username collision.](https://agentprime.io/advisories/CVE-2022-23721.md) `CVE-2022-23721` · CVE record: Ping Identity unspecified · CVSS 3.8 Low · Not analysed yet · Published 25 Apr 2023 · Tags: CWE-694 - [Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-20100.md) `CVE-2023-20100` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.8 Medium · Not analysed yet · Published 23 Mar 2023 · Tags: CWE-694 - [BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known](https://agentprime.io/advisories/CVE-2021-3436.md) `CVE-2021-3436` · CVE record: zephyrproject-rtos zephyr · CVSS 4.3 Medium · Not analysed yet · Published 5 Oct 2021 · Tags: CWE-694 - [plugin.yaml file allows for duplicate entries in helm](https://agentprime.io/advisories/GHSA-c52f-pq47-2r9j.md) `GHSA-c52f-pq47-2r9j`, `BIT-helm-2020-15187`, `CVE-2020-15187` · Go `helm.sh/helm` and 1 more: affected `>=2.0.0, <2.16.11`, fixed in `2.16.11` · CVSS 3.0 Low · Not analysed yet · Published 24 May 2021 · Tags: Other injection, CWE-694 - [Repository index file allows for duplicates of the same chart entry in helm](https://agentprime.io/advisories/GHSA-jm56-5h66-w453.md) `GHSA-jm56-5h66-w453`, `BIT-helm-2020-15185`, `CVE-2020-15185` · Go `helm.sh/helm` and 1 more: affected `<2.16.11`, fixed in `2.16.11` · CVSS 2.2 Low · Not analysed yet · Published 24 May 2021 · Tags: Other injection, CWE-20, CWE-694 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .