Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-100105— Alerting contact point authorization bypass via schema downgrade

Quick assessment

Affected

Grafana Grafana Enterprise

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

拥有编辑联系点权限但无权修改其受保护字段的用户，可通过将集成切换至旧版架构来更改受保护设置（例如联系点的目标 URL），从而可能导致存储的凭据泄露以及告警通知被错误重定向（授权不当）。

CVSS 7.7 · High Updated Oct 29, 2026

Possible ATT&CK Techniques 2 AI

T1078 · Valid Accounts T1551

Affected Version Matrix 8

Vendor	Product	Version Range	Status
Grafana	Grafana Enterprise	`12.4.0≤ 12.4.13`	affected
		`13.0.0≤ 13.0.11`	affected
		`13.1.0≤ 13.1.8`	affected
		`13.2.0≤ 13.2.4`	affected
Grafana	Grafana OSS	`12.4.0≤ 12.4.13`	affected
		`13.0.0≤ 13.0.11`	affected
		`13.1.0≤ 13.1.8`	affected
		`13.2.0≤ 13.2.4`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Alerting contact point authorization bypass via schema downgrade

Source: CVE Program / CVE List V5

Vulnerability Description

A user with permission to edit contact points but not their protected fields can change protected settings, such as a contact point's destination URL, by switching an integration to a legacy schema version, which can expose stored credentials and redirect alert notifications (incorrect authorization).

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

授权机制不正确

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Grafana	Grafana Enterprise	12.4.0 ~ 12.4.13	-
Grafana	Grafana OSS	12.4.0 ~ 12.4.13	-

II. Public POCs for CVE-2026-100105

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-100105

请登录查看更多情报信息。

Vendor Pages for CVE-2026-100105 (1)

🔗 Vercel Security Checkpoint vendor-advisory

https://www.cve.org/CVERecord?id=CVE-2026-100105

Same Patch Batch · Grafana · 2026-10-28 · 5 CVEs total

CVE-2026-103506	8.9 HIGH	SSO settings authorization bypass
CVE-2026-88967	7.7 HIGH	Azure Monitor access token disclosure via SSRF
CVE-2026-88858	6.5 MEDIUM	Server-side expression parser denial of service
CVE-2026-79656	6.0 MEDIUM	OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and G

IV. Related Vulnerabilities

Same product: Grafana Enterprise

Same vendor: Grafana

Same weakness: CWE-863