What is CVE-2026-58477?

CVE-2026-58477 is a high-severity vulnerability in Dan-In-Ca Sip, classified under Improperly Controlled Modification of Dynamically-Determined Object Attributes. CVSS score: 8.2/10. Published 2026-07-14.

How severe is CVE-2026-58477?

High severity. CVSS v3 base score is 8.2 out of 10.

Vulnerability in Dan-In-Ca Sip

CVE-2026-58477

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names in HTTP requests. Attackers can manipulate parameters corresponding to sensitive values such as the passphrase and listening port, and can also achieve the same result through cross-site request forgery due to the absence of adequate request validation.

Vulnerability class: Mass Assignment

EPSS: 0.005 (41.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L.

Affected products

Dan-in-ca Sip — versions 0
Dan-in-ca Sustainable_irrigation_platform

Weakness classification (CWE)

CWE-915 — Improperly Controlled Modification of Dynamically-Determined Object Attributes

References

disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)
disclosure@vulncheck.com (Exploit, technical-description, Third Party Advisory, exploit)

Frequently asked questions

What is CVE-2026-58477?: CVE-2026-58477 is a high-severity vulnerability in Dan-In-Ca Sip, classified under Improperly Controlled Modification of Dynamically-Determined Object Attributes. CVSS score: 8.2/10. Published 2026-07-14.
How severe is CVE-2026-58477?: High severity. CVSS v3 base score is 8.2 out of 10.