CVE Intelligence

OPeNDAP Inc. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting OPeNDAP Inc. products: 1 record(s), with severity, exploitation and fixes.

Hyrax-docker 1

Exploited only (KEV) →

CVE-2026-16637 Medium · 6.5 CWE-201 Aug 7, 2026
OPeNDAP Hyrax SSRF and Credential Disclosure via Unvalidated Redirects
OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.