Vulnerability · Published Jul 14, 2026 · Assigned by VulnCheck

CVE-2026-58477Sustainable Irrigation Platform 5.2.16 Mass Assignment via HTTP Parameters

High 8.2

In plain English

A high-severity security flaw in SIP from Dan-in-CA. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).

Severity (CVSS 3.1)8.2High

Exploit odds (30 days)0.5%top 56.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names in HTTP requests. Attackers can manipulate parameters corresponding to sensitive values such as the passphrase and listening port, and can also achieve the same result through cross-site request forgery due to the absence of adequate request validation.

Affected products (as reported)

Vendor	Product	Versions
Dan-in-CA	SIP	0 – through 5.2.16

Weakness: CWE-915 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

References

Zero Science Lab Advisory (ZSL-2026-5997) technical-description, exploit
https://www.vulncheck.com/advisories/sustainable-irrigation-platform-mass-assignment-via-http-parameters third-party-advisory