Security Advisory

CVE-2026-16637

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-07 13:14:10

Last updated 2026-08-10 11:57:04

Assigner certcc

CVSS score 6.5

State PUBLISHED

Description

OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.

← Browse all CVEs View on cve.org ↗