Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-10584

HTTPS Fallback to HTTP in Graph Explorer

Description

Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interception of requests intended to be sent over HTTPS. To remediate this issue, users should upgrade to Graph Explorer v3.0.1 or later.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AWS Graph Explorer

Default version status: unaffected

  • 1.1.0 to < 3.0.1affected

References