CVE-2026-16637 - OPeNDAP Hyrax SSRF and Credential Disclosure via Unvalidated Redirects

Back Back to CVE browser

MEDIUM

OPeNDAP Hyrax SSRF and Credential Disclosure via Unvalidated Redirects

Published Aug 7, 2026

6.5

MEDIUM

CVSS 3.1

EPSS 0.46%

Description

OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.

Affected products

Vendor OPeNDAP Inc. Product Hyrax-Docker Default
n/a
- Version
  1.18.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

OPeNDAP Inc.

Hyrax-Docker

n/a

Version	Status	Constraints
1.18.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-201

CWE-918

SSRF

References (3)

Link	Providers	Tags
https://github.com/OPENDAP/hyrax-docker
https://www.kb.cert.org/vuls/id/305509
https://www.opendap.org/official-hyrax-1-18-release/

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner certcc

Published Aug 7, 2026

Updated Aug 10, 2026

Reserved Jul 22, 2026

Link CVE-2026-16637

CISA Vulnrichment

Updated Aug 10, 2026

NVD

Status Awaiting Analysis

Modified Sep 8, 2026

Link CVE-2026-16637

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-16637