# CVE-2026-10584: HTTPS Fallback to HTTP in Graph Explorer

> CVE-2026-10584: HTTPS Fallback to HTTP in Graph Explorer. CVSS 5.9 (CVSS 3.1).

Canonical: https://rewindex.com/cve/CVE-2026-10584
Last updated: 2026-07-22T19:10:00Z

- Published: 2026-06-02 19:08 UTC · Updated: 2026-07-22 19:10 UTC · Assigner: AMZN
- CVSS: 5.9 (CVSS 3.1) · Severity: Medium · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS: 0.10%, 1th percentile (scored 2026-10-25)
- CISA KEV: no
- CWE: CWE-319

## Description

Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interception of requests intended to be sent over HTTPS. To remediate this issue, users should upgrade to Graph Explorer v3.0.1 or later.

## Affected vendors and products

- AWS: Graph Explorer

## Tracked companies

- [Amazon Web Services](https://rewindex.com/company/aws.md)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2026-10584)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2026-10584)
- [https://aws.amazon.com/security/security-bulletins/2026-038-aws/](https://aws.amazon.com/security/security-bulletins/2026-038-aws/)
- [https://github.com/aws/graph-explorer/releases/tag/v3.0.1](https://github.com/aws/graph-explorer/releases/tag/v3.0.1)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2026-10584 · Markdown: https://rewindex.com/cve/CVE-2026-10584.md · JSON: https://rewindex.com/api/v1/cves/CVE-2026-10584 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T04:05:25.747Z