CWE-694

CVEs per yearBy the year they were published

1. 20202
2. 20211
3. 20232
4. 20241
5. 20252
6. 202610

Newest CVEs

• CVE-2026-115289

  Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure

  Elastic · APM Server

  Medium4.3
• CVE-2026-114643

  Duplicate geometry fields via unvalidated GeoJSON extra members

  MongoDB · C# Driver

  Medium5.3
• CVE-2026-112906

  filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse

  tox-dev · filelock

  Medium4.7
• CVE-2026-78359

  Duplicate Identity / Identity Shadowing across CustomerUser backends

  OTRS GmbH (former OTRS AG) · OTRS

  Medium5.4
• CVE-2026-108752

  JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen

  jupyterhub · jupyterhub

  Low2.3
• CVE-2026-102634

  SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room

  sgl-project · sglang

  High8.7
• CVE-2026-71327

  Traefik: Gateway API route identity collision allows cross-namespace backend hijacking

  traefik · traefik

  High7.6
• CVE-2026-63976

  Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success

  Linux · Linux

  High8.8
• CVE-2026-57024

  Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously

  Juniper Networks · Junos OS

  Medium6.9
• CVE-2026-5794

  Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout

  Ercom · Cryptobox

  Medium4.9

Vendors it comes up for most

1. helm2
2. Cisco1
3. Elastic1
4. Ercom1
5. Gallagher1
6. Juniper Networks1
7. Keylime Project1
8. Linux1
9. MongoDB1
10. OTRS GmbH (former OTRS AG)1