CVE-2026-10584CWE-319

HTTPS Fallback to HTTP in Graph Explorer

High · published June 2, 2026

CVSS v4.0
8.2
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interception of requests intended to be sent over HTTPS.

To remediate this issue, users should upgrade to Graph Explorer v3.0.1 or later.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00101 · 0.9th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-06-02T19:08Z
EPSS history
Timeline
  • 02 JUN 19:08Z
    HTTPS Fallback to HTTP in Graph Explorer
    cvelistv5