Skip to content
OpenAdvisories

Weakness (CWE)

CWE-694: Use of Multiple Resources with Duplicate Identifier

Base Incomplete

The product uses multiple resources that can have the same identifier, in a context in which unique identifiers are required.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Where possible, use unique identifiers. If non-unique identifiers are detected, then do not operate any resource with a non-unique identifier and report the error appropriately.

Source: MITRE CWE-694

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2026-102634

    SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room

    SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstrap_room values …

    sgl-project SGLang
  • High 7.6
    CVE-2026-71327

    Traefik: Gateway API route identity collision allows cross-namespace backend hijacking

    Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go builds HTTPRoute, GRPCRou…

    traefik traefik github.com/traefik/traefik github.com/traefik/traefik/v2 Go
  • High 8.8
    CVE-2026-63976

    Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success l2cap_ecred_reconf_rsp() returns early on success without clearing chan->ident. Every other L2CAP response handler (l2cap_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.2
    CVE-2025-13609

    Keylime: keylime: registrar allows identity takeover via duplicate uuid registration

    A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TPM) device but claiming an existing agent's unique identifier (UUID). This action overwrites the legi…

    Red Hat Keylime Project Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Linux PyPI
  • High 8.1
    CVE-2025-59048

    OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method

    OpenBao's AWS Plugin generates AWS access credentials based on IAM policies. Prior to version 0.1.1, the AWS Plugin is vulnerable to cross-account IAM role Impersonation in the AWS auth method. The vulnerability allows an IAM role from an untrusted AWS accoun…

    openbao openbao-plugins github.com/openbao/openbao-plugins Go