CVE-2026-16637

MediumCVSS 6.5/10Last modified Oct 23, 2026

Description

OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-201CWE-918

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Aug 7, 2026
Last modified
Oct 23, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-166386.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Media Folders allows Stored XSSCVE-2026-166399.8Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication BCVE-2026-16646.9Summary An Insecure Direct Object Reference has been found to exist in `createHeaderBasedEmailResolver()` function within the Cloudflare AgCVE-2026-166406.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Search API Autocomplete allows CVE-2026-166419.8Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*.CVE-2026-166425.7Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.CVE-2026-166435.7Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*.CVE-2026-166449.1Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 CVE-2026-166459.1Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue afCVE-2026-166465.7Vulnerability in Drupal PanKM. This issue affects PanKM versions: *.*.CVE-2026-166474.1Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue CVE-2026-166483.8Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Stolen Credentials. Thi