Quick answers
- Is CVE-2026-10584 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-10584 being exploited in the wild.
- How severe is CVE-2026-10584?
- High severity, with a CVSS score of 5.9, published 2 June 2026.
- Which products and versions are affected?
- Amazon Web Services Graph Explorer >= 1.1.0, < 3.0.1.
- Is there a fix for CVE-2026-10584?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-10584 attacked?
- It is attacked over the network or from the adjacent network.
- Am I affected by CVE-2026-10584?
- Check whether you run Amazon AWS or Amazon Web Services Graph Explorer at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is a protocol downgrade flaw in AWS Graph Explorer where HTTPS connections are permitted to degrade to HTTP under certain conditions. This is a form of man-in-the-middle (MITM) attack vector that requires network adjacency or the ability to intercept traffic (e.g., on shared Wi-Fi, compromised network, or via DNS/ARP spoofing). An attacker positioned on the network path can force or observe the downgrade and capture unencrypted traffic containing API requests, responses, authentication tokens, and graph query data. Since the fallback is implicit in the application logic rather than user-initiated, it can occur transparently. A patch restricting connections to HTTPS-only is expected to resolve this issue.
Affected products
- AWS Graph Explorer
Timeline
- 2026-09-22: disclosed