{"metadata": {"vulnerability": "CVE-2026-105667", "count": 15, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-12T19:33:48.578Z", "date_only": false, "value": "2026-10-12T19:33:48.578Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-105667", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T20:45:38.681Z", "date_only": false, "value": "2026-10-14T20:45:38.681827Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSMA-26-288-02", "record": "ICSMA-26-288-02", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-15T06:00:00Z", "date_only": false, "value": "2026-10-15T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSMA-26-288-02", "record": "ICSMA-26-288-02", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-15T06:00:00Z", "date_only": false, "value": "2026-10-15T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSMA-26-288-02", "record": "ICSMA-26-288-02", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-15T06:00:00Z", "date_only": false, "value": "2026-10-15T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSMA-26-288-02", "record": "ICSMA-26-288-02", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-15T20:01:32.834Z", "date_only": false, "value": "2026-10-15T20:01:32.834599Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxwu3tproq2v", "record": "CVE-2026-105667", "field": "creation_timestamp", "uuid": "ca53c133-1339-4565-b44d-aa2536747b16", "content": "~Cisa~\nSix flaws in dcm4chee-arc-light 5.35.1 enable data theft, tampering, deletion and denial of service; upgrade to 5.35.2+.\n-\nIOCs: CVE-2026-97851, CVE-2026-105279, CVE-2026-105667\n-\n#CVE #Healthcare #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mxwu3tproq2v"}, {"timestamp": "2026-10-16T14:32:22.216Z", "date_only": false, "value": "2026-10-16T14:32:22.216Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-105667", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T14:32:22.216Z", "date_only": false, "value": "2026-10-16T14:32:22.216Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / icscert", "record": "CVE-2026-105667", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T14:49:36.264Z", "date_only": false, "value": "2026-10-16T14:49:36.264449Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117451140355592756", "record": "CVE-2026-105667", "field": "creation_timestamp", "uuid": "7e8ad80b-1cc4-4eeb-b0d0-195739bb6f19", "content": "CVE-2026-105667 J4Care dcm4che Missing Authentication for Critical Function In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender can reassign studies and related workflow records from one patient identity to another. The archive's unmerge does not reverse this.\nhttps://www.cve.org/CVERecord?id=CVE-2026-105667https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-02.json#J4Care #dcm4chee-arc-light#CVE_2026_105667#bot", "url": "https://infosec.exchange/users/cve/statuses/117451140355592756"}, {"timestamp": "2026-10-16T15:05:51.316Z", "date_only": false, "value": "2026-10-16T15:05:51.316816Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105667", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T15:05:51.316Z", "date_only": false, "value": "2026-10-16T15:05:51.316816Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105667", "record": "FKIE_CVE-2026-105667", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T15:17:04.260Z", "date_only": false, "value": "2026-10-16T15:17:04.260", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105667", "record": "FKIE_CVE-2026-105667", "field": "published"}, {"timestamp": "2026-10-16T15:20:18.221Z", "date_only": false, "value": "2026-10-16T15:20:18.221Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-105667", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T15:20:18.221Z", "date_only": false, "value": "2026-10-16T15:20:18.221Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105667", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T20:04:29.760Z", "date_only": false, "value": "2026-10-16T20:04:29.760", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105667", "record": "FKIE_CVE-2026-105667", "field": "lastModified"}]}