Vulnerability Description
Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names in HTTP requests. Attackers can manipulate parameters corresponding to sensitive values such as the passphrase and listening port, and can also achieve the same result through cross-site request forgery due to the absence of adequate request validation.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dan-In-Ca | Sustainable Irrigation Platform | <= 5.2.16 |
Related Weaknesses (CWE)
References
- https://www.vulncheck.com/advisories/sustainable-irrigation-platform-mass-assignThird Party Advisory
- https://www.zeroscience.mk/#/advisories/ZSL-2026-5997ExploitThird Party Advisory
FAQ
What is CVE-2026-58477?
CVE-2026-58477 is a vulnerability with a CVSS score of 8.2 (HIGH). Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying a...
How severe is CVE-2026-58477?
CVE-2026-58477 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-58477?
Check the references section above for vendor advisories and patch information. Affected products include: Dan-In-Ca Sustainable Irrigation Platform.