PT-2026-45817 · Aws · Graph Explorer

Published 2026-06-02 · Updated 2026-06-02 · CVE-2026-10584

NVD

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interception of requests intended to be sent over HTTPS.

To remediate this issue, users should upgrade to Graph Explorer v3.0.1 or later.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2026-10584

Affected Products

Graph Explorer

References · 3

• https://github.com/aws/graph-explorer/releases/tag/v3.0.1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-10584 · Security Note
• https://aws.amazon.com/security/security-bulletins/2026-038-aws · Vendor Advisory