Skip to main content

Sustainable Irrigation Platform EUVDEUVD-2026-43687

| CVE-2026-60114 HIGH
Path Traversal (CWE-22)
2026-07-14 VulnCheck GHSA-9xpx-72mq-c8x9
Path Traversal Sip
8.7
CVSS 4.0 · Vendor: VulnCheck
Share

Severity by source

Vendor (VulnCheck) PRIMARY
8.7 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
7.5 HIGH

Network-reachable restore feature exploitable at low complexity with no auth in default config (PR:N), yielding arbitrary file write (I:H) but no confidentiality or availability impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Jul 14, 2026 - 15:32 vuln.today
CVE Published
Jul 14, 2026 - 14:37 cve.org
HIGH 8.7

DescriptionCVE.org

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vulnerability that allows attackers with access to the restore functionality to write files to arbitrary locations by uploading crafted JSON backup files with unvalidated keys used to construct file paths. Attackers can exploit the lack of key validation in the JSON restore process, combined with the absence of a required passphrase in the default configuration or the default passphrase 'opendoor', to write arbitrary JSON files outside the intended data directory.

AnalysisAI

Arbitrary file write in Sustainable Irrigation Platform (SIP) through 5.2.16 lets remote attackers plant JSON files outside the intended data directory by abusing the JSON backup-restore feature, which builds file paths from attacker-controlled keys without validation. Because the default deployment ships with no required passphrase (or the hardcoded default 'opendoor'), an attacker can reach the restore endpoint without legitimate credentials. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Identify exposed SIP restore endpoint
Delivery
Craft JSON backup with traversal keys
Exploit
Upload using default/empty 'opendoor' passphrase
Execution
Restore writes file outside data dir
Impact
Overwrite arbitrary JSON, compromise integrity
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires reaching the SIP JSON backup restore feature and that the instance uses the default backup passphrase state - either no passphrase configured or the hardcoded default 'opendoor' - which is the shipped default and enables unauthenticated abuse (consistent with PR:N). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The provided CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N, VI:H, VC:N/VA:N, score 8.7) describes a network-reachable, low-complexity, unauthenticated write-only impact - integrity high, no confidentiality or availability impact - which is internally consistent with a path-traversal file-write flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker locates an internet-exposed SIP instance running the default configuration, then submits a crafted JSON backup file to the restore functionality using key names containing directory-traversal sequences. Because the default passphrase is empty or 'opendoor', the restore proceeds without valid credentials and writes an attacker-controlled JSON file to an arbitrary location on disk. …
Remediation No fixed version was included in the supplied data, so treat this as No vendor-released patch identified at time of analysis and monitor the VulnCheck advisory (https://www.vulncheck.com/advisories/sustainable-irrigation-platform-path-traversal-via-json-backup-restore) and Zero Science advisory (https://www.zeroscience.mk/#/advisories/ZSL-2026-5996) for an upgrade beyond 5.2.16. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: inventory all systems running SIP through 5.2.16 and immediately block external access to the JSON restore endpoint at the perimeter firewall or load-balancer-this eliminates attack surface without system downtime. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Sip

View all
CVE-2026-58479 CRITICAL POC
9.2 Jul 14

Remote command injection in the Sustainable Irrigation Platform (SIP) through version 5.2.16 lets unauthenticated or CSR
CVE-2026-58477 HIGH POC
8.8 Jul 14

Configuration tampering in the Sustainable Irrigation Platform (SIP) through version 5.2.16 lets remote unauthenticated

CVE-2026-58476 HIGH POC
7.0 Jul 14

Cross-site request forgery in the Sustainable Irrigation Platform (SIP) through 5.2.16 lets remote attackers execute sta
CVE-2026-58478 MEDIUM POC
6.3 Jul 14

Server-side request forgery in Sustainable Irrigation Platform (SIP) through version 5.2.16 allows unauthenticated netwo
CVE-2026-58475 MEDIUM POC
5.3 Jul 14

Stored cross-site scripting in Sustainable Irrigation Platform (SIP) through version 5.2.16 enables unauthenticated remo

Same weakness CWE-22 – Path Traversal

View all
CVE-2019-3396 CRITICAL POC
9.8
CVE-2019-19781 CRITICAL POC
9.8
CVE-2020-5902 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2021-27065 HIGH POC
7.8
CVE-2019-11510 CRITICAL POC
10.0
CVE-2018-13379 CRITICAL POC
9.1
CVE-2015-0016 HIGH POC
7.8

Same technique Path Traversal

View all
CVE-2025-64446 CRITICAL POC
9.8
CVE-2015-0016 HIGH POC
7.8
CVE-2016-0752 HIGH POC
7.5
CVE-2024-13159 CRITICAL POC
9.8
CVE-2024-13160 CRITICAL POC
9.8
CVE-2024-13161 CRITICAL POC
9.8
CVE-2014-0780 CRITICAL POC
9.8
CVE-2024-48248 HIGH POC
8.6

Share

EUVD-2026-43687 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy