CVE-2026-16637

Summary

OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.

Affected Software

Weaknesses

• CWE-918 Server-Side Request Forgery (SSRF)
• CWE-201Exposure of Sensitive Information Through Shared Resources

ADP Enrichment

CVE Program Container

Additional References

• https://www.kb.cert.org/vuls/id/305509

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/OPENDAP/hyrax-docker
• https://www.opendap.org/official-hyrax-1-18-release/

• ←Previous
• Next→