Skip to content
OpenAdvisories

Package · Azure Linux

sip

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Critical 9.8
    CVE-2026-58479

    Sustainable Irrigation Platform 5.2.16 RCE via cli_control Plugin Command Injection

    Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerability in the optional cli_control plugin that allows unauthenticated or cross-site request forgery attackers to execute arbitrary operating-system commands by st…

    Dan-in-CA SIP sip Azure Linux
  • Medium 6.5
    CVE-2026-58478

    Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL

    Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying a malicious callback URL when the opti…

    Dan-in-CA SIP sip Azure Linux
  • High 8.2
    CVE-2026-58477

    Sustainable Irrigation Platform 5.2.16 Mass Assignment via HTTP Parameters

    Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names in HTTP requests. Attackers can ma…

    Dan-in-CA SIP sip Azure Linux
  • High 7.5
    CVE-2026-60114

    Sustainable Irrigation Platform 5.2.16 Path Traversal via JSON Backup Restore

    Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vulnerability that allows attackers with access to the restore functionality to write files to arbitrary locations by uploading crafted JSON backup files with unvalidated k…

    Dan-in-CA SIP sip Azure Linux
  • High 8.1
    CVE-2026-58476

    Sustainable Irrigation Platform 5.2.16 CSRF via Administrative GET Requests

    Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing administrative actions by luring a logged-in administrator into visiting a malicious page t…

    Dan-in-CA SIP sip Azure Linux
  • Medium 6.1
    CVE-2026-58475

    Sustainable Irrigation Platform 5.2.16 Stored XSS via Program Name

    Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by supplying malicious script payloads within program names submitted via HT…

    Dan-in-CA SIP sip Azure Linux