| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | CVE-2026-58477 | 14 Jul 202615:46 | – | circl |
 | CVE-2026-58477 Sustainable Irrigation Platform 5.2.16 Mass Assignment via HTTP Parameters | 14 Jul 202614:39 | – | cvelist |
 | EUVD-2026-43688 | 14 Jul 202614:39 | – | euvd |
 | CVE-2026-58477 | 14 Jul 202614:39 | – | mend |
 | CVE-2026-58477 | 14 Jul 202615:17 | – | nvd |
 | AZL-92373 CVE-2026-58477 affecting package sip 4.19.25-13 | 14 Jul 202615:17 | – | osv_azl |
 | PT-2026-58046 | 14 Jul 202600:00 | – | ptsecurity |
 | CVE-2026-58477: Improperly Controlled Modification of Dynamically-Determined Object Attributes | 14 Jul 202600:00 | – | rapid7 |
 | CVE-2026-58477 Sustainable Irrigation Platform 5.2.16 Mass Assignment via HTTP Parameters | 14 Jul 202614:39 | – | vulnrichment |
 | SIP Sustainable Irrigation Platform 5.x (cv) Settings Mass Assignment | 14 Jul 202600:00 | – | zeroscience |
Node
[
{
"defaultStatus": "affected",
"packageURL": "pkg:github/Dan-in-CA/SIP",
"vendor": "Dan-in-CA",
"product": "SIP",
"repo": "https://github.com/Dan-in-CA/SIP",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThanOrEqual": "5.2.16"
}
]
}
]| Source | Link |
|---|---|
| zeroscience | www.zeroscience.mk/ |
| vulncheck | www.vulncheck.com/advisories/sustainable-irrigation-platform-mass-assignment-via-http-parameters |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| upas | query param | /cv | Mass assignment vulnerability allowing unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names in HTTP requests (e.g., disabling passphrase). | CWE-915 |
| upas | query param | /cv | Mass assignment vulnerability enabling modification of multiple settings including port via arbitrary parameter names; can be exploited via CSRF. | CWE-915 |
| htp | query param | /cv | Mass assignment vulnerability enabling modification of multiple settings including port via arbitrary parameter names; can be exploited via CSRF. | CWE-915 |
| nbrd | query param | /cv | Mass assignment vulnerability enabling modification of multiple settings including port via arbitrary parameter names; can be exploited via CSRF. | CWE-915 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
14 Jul 2026 23:17Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.17.5 - 8.2
CVSS 48.8
EPSS0.00511
SSVC