Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerability in the optional cli_control plugin that allows unauthenticated or cross-site request forgery attackers to execute arbitrary operating-system commands by storing a malicious payload via the plugin's HTTP endpoint. Attackers can trigger execution by activating the associated irrigation station, exploiting the absence of passphrase protection or the default passphrase 'opendoor', to achieve arbitrary command execution on the underlying host.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 CVE-2026-58479 — CVSS 9.8/10 ██████████ Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerability in the optional... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/2tnN4XMkw8
Post summary
A critical command‑injection vulnerability (CVE‑2026‑58479) in Sustainable Irrigation Platform v5.2.16 has been patched; no PoC or active exploitation is reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | dan-in-ca | sustainable_irrigation_platform | - | - | - |