CVE-2026-58478: Server-Side Request Forgery (SSRF)

Sustainable Irrigation Platform SIP through version 5.2.16 contains a server-side request forgery SSRF vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying a malicious callback URL when the optional Node-RED plugin is installed. Attacke...

PT-2026-58047

Sustainable Irrigation Platform SIP through version 5.2.16 contains a server-side request forgery SSRF vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying a malicious callback URL when the optional Node-RED plugin is installed. Attacke...

PT-2026-58031

Sustainable Irrigation Platform SIP through version 5.2.16 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing administrative actions by luring a logged-in administrator into visiting a malicious page that issues HTTP GET requests without CSR...

PT-2026-58030

Sustainable Irrigation Platform SIP through version 5.2.16 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by supplying malicious script payloads within program names submitted via HTTP requests. Attackers can exploit the...

CVE-2026-58479: Improper Neutralization of Special Elements used in an OS Command

Sustainable Irrigation Platform SIP through version 5.2.16 contains a command injection vulnerability in the optional clicontrol plugin that allows unauthenticated or cross-site request forgery attackers to execute arbitrary operating-system commands by storing a malicious payload via the plugin'...

📄 SIP Sustainable Irrigation Platform 5.x Remote Code Execution

SIP Sustainable Irrigation Platform version 5.x executes user-configured operating-system commands when an irrigation station changes state, if the optional clicontrol plugin is installed and enabled. This can be exploited to run arbitrary commands on the affected host by storing a command throug...