CVE-2026-100105

LOWCVSS 7.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A user with permission to edit contact points but not their protected fields can change protected settings, such as a contact point's destination URL, by switching an integration to a legacy schema version, which can expose stored credentials and redirect alert notifications (incorrect authorization).

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://grafana.com/security/security-advisories/cve-2026-100105

Weakness type (CWE)

CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

Relnx@relnxio1d
Running Grafana? Grafana patched the same 3 CVEs (CVE-2026-100105, -88858, -88967) in all five supported lines on Oct 27. Move to 12.4.14, 13.0.12, 13.1.9, 13.2.5 or 13.3.0. Which Grafana line are you on: 12.4, 13.0, 13.1, 13.2 or 13.3? https://t.co/GLHWGwN7wr
0000031
10 followersView on X

Explore more

Back to dashboard