Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-694
Weakness type CWE-694 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 5 | 5 | 0 |
Monthly trend
▅▅▅█
2026-07 1 · 2026-08 1 · 2026-09 1 · 2026-10 2
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-102634 | 8.7 | 46.7 | — | SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room |
| CVE-2026-71327 | 7.6 | 40.1 | — | Traefik: Gateway API route identity collision allows cross-namespace backend hijacking |
| CVE-2026-57024 | 6.9 | 34.5 | — | Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually c… |
| CVE-2026-108752 | 2.3 | 14.6 | — | JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen |
| CVE-2026-78359 | 5.4 | 5.2 | — | Duplicate Identity / Identity Shadowing across CustomerUser backends |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| juniper networks | 1 |
| jupyterhub | 1 |
| otrs gmbh (former otrs ag) | 1 |
| sgl-project | 1 |
| traefik | 1 |
