CWE-694
CWE-694 · 3 records · 2 with a public proof-of-concept
Records the NVD classes under CWE-694, highest CVSS first.
- HIGH 7.5CVE-2026-102634public PoC
SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstrap_room values t…
- MEDIUM 5.4CVE-2026-78359
OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser backends. When multiple backends, such as a database and LDAP, are configured, the uniqueness check for customer user email addresses is perfo…
- MEDIUM 4.2CVE-2026-108752public PoC
JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the clien…