CVE-2026-58477
Sustainable Irrigation Platform 5.2.16 Mass Assignment via HTTP Parameters
- State
- Published
- Severity
- 8.8 High
- Published
- Jul 14, 2026
- Updated
- Jul 14, 2026
- Reserved
- Jun 30, 2026
Description
Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names in HTTP requests. Attackers can manipulate parameters corresponding to sensitive values such as the passphrase and listening port, and can also achieve the same result through cross-site request forgery due to the absence of adequate request validation.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.8 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 8.2 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L | VulnCheck |
Weaknesses
- CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes
Affected Products
| Product | Versions |
|---|---|
SIPDan-in-CA |
|
References
- Zero Science Lab Advisory (ZSL-2026-5997)technical-descriptionexploit
- https://www.vulncheck.com/advisories/sustainable-irrigation-platform-mass-assignment-via-http-parametersthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.