Is CVE-2026-100105 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-100105?

CVE-2026-100105 has a CVSS v3 severity of HIGH (7.7).

Back

CVE-2026-100105

Description

A user with permission to edit contact points but not their protected fields can change protected settings, such as a contact point's destination URL, by switching an integration to a legacy schema version, which can expose stored credentials and redirect alert notifications (incorrect authorization).