Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Dan-in-CA Component: Sustainable Irrigation Platform Clear all filters
TI-2026-42083 CVE-2026-58479 · GHSA-j4xr-2mrh-gcch

Sustainable Irrigation Platform 5.2.16 RCE via cli_control Plugin Command Injection

Priority HIGH 81

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerability in the optional cli_control plugin that allows unauthenticated or cross-site request forgery attackers to execute ar…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.04404 Published 2026-07-14 No fix listed CWE-78
TI-2026-42082 CVE-2026-58478 · GHSA-2444-cfc6-gh44

Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL

Priority HIGH 67

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00376 Published 2026-07-14 No fix listed CWE-918
TI-2026-42081 CVE-2026-58477 · GHSA-6862-8mf9-7vg4

Sustainable Irrigation Platform 5.2.16 Mass Assignment via HTTP Parameters

Priority HIGH 77

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter n…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00511 Published 2026-07-14 No fix listed CWE-915
TI-2026-42834 CVE-2026-60114 · GHSA-9xpx-72mq-c8x9

Sustainable Irrigation Platform 5.2.16 Path Traversal via JSON Backup Restore

Priority HIGH 77

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vulnerability that allows attackers with access to the restore functionality to write files to arbitrary locations by uploading craft…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00499 Published 2026-07-14 No fix listed CWE-22
TI-2026-42080 CVE-2026-58476 · GHSA-5j3h-8rxj-3v3m

Sustainable Irrigation Platform 5.2.16 CSRF via Administrative GET Requests

Priority MEDIUM 64

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing administrative actions by luring a logged-in adminis…

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00271 Published 2026-07-14 No fix listed CWE-352
TI-2026-42079 CVE-2026-58475 · GHSA-fjj7-xvgh-3jwr

Sustainable Irrigation Platform 5.2.16 Stored XSS via Program Name

Priority LOW 24

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by supplying malicious script payload…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00311 Published 2026-07-14 No fix listed CWE-79