CVE-2026-16637CWE-201CWE-918ssrf

CVE-2026-16637

Medium · published August 7, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00457 · 38.6th percentile
Weaknesses
CWE-201 · Insertion of Sensitive Information Into Sent Data; CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-08-07T18:16Z
References (3)
https://github.com/OPENDAP/hyrax-docker · [email protected]https://www.opendap.org/official-hyrax-1-18-release/ · [email protected]https://www.kb.cert.org/vuls/id/305509 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 07 AUG 13:14Z
    OPeNDAP Hyrax SSRF and Credential Disclosure via Unvalidated Redirects
    cvelistv5