dan-in-ca vulnerabilities

Products

• dan-in-ca/sip 6
• sustainable irrigation platform 6

Latest dan-in-ca CVEs

Newest publication first

1. CVE-2026-58479 Sustainable Irrigation Platform 5.2.16 RCE via cli_control Plugin Command Injection

   Published 2026-07-14

   Critical·CVSS 9.2 EPSS 4.4%

   Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerability in the optional cli_control plugin that allows unauthenticated or cross-site request forgery attackers to execute arbitrary operating-system commands by storing a malicious pay...

2. CVE-2026-58478 Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL

   Published 2026-07-14

   Medium·CVSS 6.3 EPSS 0.38%

   Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying a malicious callback URL when the optional Node-RED plugin...

3. CVE-2026-58477 Sustainable Irrigation Platform 5.2.16 Mass Assignment via HTTP Parameters

   Published 2026-07-14

   High·CVSS 8.8 EPSS 0.51%

   Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names in HTTP requests. Attackers can manipulate parameters c...

4. CVE-2026-60114 Sustainable Irrigation Platform 5.2.16 Path Traversal via JSON Backup Restore

   Published 2026-07-14

   High·CVSS 8.7 EPSS 0.50%

   Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vulnerability that allows attackers with access to the restore functionality to write files to arbitrary locations by uploading crafted JSON backup files with unvalidated keys used to construct...

5. CVE-2026-58476 Sustainable Irrigation Platform 5.2.16 CSRF via Administrative GET Requests

   Published 2026-07-14

   High·CVSS 7.0 EPSS 0.27%

   Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing administrative actions by luring a logged-in administrator into visiting a malicious page that issues HTTP GET r...

6. CVE-2026-58475 Sustainable Irrigation Platform 5.2.16 Stored XSS via Program Name

   Published 2026-07-14

   Medium·CVSS 5.3 EPSS 0.31%

   Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by supplying malicious script payloads within program names submitted via HTTP requests. Attacker...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.