{"metadata": {"vulnerability": "CVE-2026-105664", "count": 18, "kinds": {"milestone": 5, "sighting": 2, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-10-12T19:43:15.406Z", "date_only": false, "value": "2026-10-12T19:43:15.406Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-105664", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T21:35:39.716Z", "date_only": false, "value": "2026-10-14T21:35:39.716045Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-288-02", "record": "ICSA-26-288-02", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-15T05:00:00Z", "date_only": false, "value": "2026-10-15T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-02", "record": "CVE-2026-105664", "field": "creation_timestamp", "uuid": "ac788b0a-c4a1-4233-a0bf-a4bdd2ba0d68", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-02"}, {"timestamp": "2026-10-15T06:00:00Z", "date_only": false, "value": "2026-10-15T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-288-02", "record": "ICSA-26-288-02", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-15T06:00:00Z", "date_only": false, "value": "2026-10-15T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-288-02", "record": "ICSA-26-288-02", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-15T06:00:00Z", "date_only": false, "value": "2026-10-15T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-288-02", "record": "ICSA-26-288-02", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T14:06:55.903Z", "date_only": false, "value": "2026-10-16T14:06:55.903Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-105664", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T14:06:55.903Z", "date_only": false, "value": "2026-10-16T14:06:55.903Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / icscert", "record": "CVE-2026-105664", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T14:17:14Z", "date_only": false, "value": "2026-10-16T14:17:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CM9Q-HMJ5-H2W5", "record": "GHSA-CM9Q-HMJ5-H2W5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T14:17:14.903Z", "date_only": false, "value": "2026-10-16T14:17:14.903", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105664", "record": "FKIE_CVE-2026-105664", "field": "published"}, {"timestamp": "2026-10-16T14:17:52.677Z", "date_only": false, "value": "2026-10-16T14:17:52.677847Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117451015544154177", "record": "CVE-2026-105664", "field": "creation_timestamp", "uuid": "17700ee7-38fe-4bc6-b859-9bd9b2317514", "content": "CVE-2026-105664 Guangzhou Juan IoT Technology EseeCloud Observable Response Discrepancy The endpoint exposes an observable response discrepancy when processing ID values. A request submitted with a nonexistent ID returns a distinct error response code from one submitted with a valid, registered ID, allowing an attacker holding a valid access token - but without further authentication or authorization - to distinguish valid ID values from the full 10-digit numeric search space. Combined with the absence of meaningful rate limiting on this endpoint, this discrepancy constitutes an enumeration oracle, enabling an attacker to discover registered devices at scale.\nhttps://www.cve.org/CVERecord?id=CVE-2026-105664https://eseecloud.app/https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-02https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-288-02.json#GuangzhouJuanIoTTechnologyCo.,Ltd. #EseeCloudApp #EseeCloudFirmware#CVE_2026_105664#bot", "url": "https://infosec.exchange/users/cve/statuses/117451015544154177"}, {"timestamp": "2026-10-16T15:06:34.434Z", "date_only": false, "value": "2026-10-16T15:06:34.434306Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105664", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T15:06:34.434Z", "date_only": false, "value": "2026-10-16T15:06:34.434306Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105664", "record": "FKIE_CVE-2026-105664", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T15:20:19.651Z", "date_only": false, "value": "2026-10-16T15:20:19.651Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-105664", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T15:20:19.651Z", "date_only": false, "value": "2026-10-16T15:20:19.651Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105664", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T15:38:45Z", "date_only": false, "value": "2026-10-16T15:38:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CM9Q-HMJ5-H2W5", "record": "GHSA-CM9Q-HMJ5-H2W5", "field": "published"}, {"timestamp": "2026-10-16T15:38:45Z", "date_only": false, "value": "2026-10-16T15:38:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CM9Q-HMJ5-H2W5", "record": "GHSA-CM9Q-HMJ5-H2W5", "field": "modified"}, {"timestamp": "2026-10-16T20:04:29.760Z", "date_only": false, "value": "2026-10-16T20:04:29.760", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105664", "record": "FKIE_CVE-2026-105664", "field": "lastModified"}]}