Which versions of Sip are affected by CVE-2026-58476?

The Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a cross-site request forgery (CSRF) vulnerability that enables remote attackers to execute state-changing administrative…

Is there a public PoC exploit available for CVE-2026-58476?

Yes, a public proof-of-concept exploit is available for CVE-2026-58476. Prioritise patching immediately. EPSS: 0.2%.

How to fix or mitigate CVE-2026-58476?

Within 24 hours, identify all SIP deployments running version 5.2.16 or earlier and document network exposure; immediately change the default credential from 'opendoor' to a strong unique passphrase and isolate SIP instances from untrusted networks and the public internet. Within 7 days, implement firewall rules restricting SIP administrative access to designated networks only, enable detailed logging and alerting for administrative endpoint access, and conduct targeted phishing awareness training for SIP administrators. Within 30 days, monitor vendor advisories for patch release; in parallel, evaluate alternative irrigation control platforms and engage the SIP vendor or project to understand remediation timeline, as no vendor-released patch is currently identified at this time.

Sip CVE-2026-58476

Q: What is the CVSS score of CVE-2026-58476?

CVE-2026-58476 has a CVSS 4.0 base score of 7.0 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-43683 HIGH

Cross-Site Request Forgery (CSRF) (CWE-352)

2026-07-14 VulnCheck

GHSA-5j3h-8rxj-3v3m

CSRF Sip

7.0

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

7.0 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulnCheck) · only source for this CVE.

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Analysis Generated

Jul 14, 2026 - 14:47 vuln.today

CVE Published

Jul 14, 2026 - 14:25 cve.org

HIGH 7.0

DescriptionCVE.org

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing administrative actions by luring a logged-in administrator into visiting a malicious page that issues HTTP GET requests without CSRF token validation or origin verification. Attackers can trigger actions such as disabling the passphrase, rebooting the device, deleting programs, or installing plugins, with the default configuration exposing these endpoints to unauthenticated users due to no required passphrase and a default credential of 'opendoor'.

AnalysisAI

Cross-site request forgery in the Sustainable Irrigation Platform (SIP) through 5.2.16 lets remote attackers execute state-changing administrative actions when a logged-in administrator is lured to a malicious page, because administrative endpoints accept HTTP GET requests with no CSRF token or origin validation. An attacker can disable the passphrase, reboot the irrigation controller, delete watering programs, or install plugins; in the default configuration these endpoints are exposed to unauthenticated users because no passphrase is required and the default credential is 'opendoor'. Publicly available exploit code exists (ZeroScience ZSL-2026-5995), though there is no public exploit identified as being used in active campaigns.