CVE-2026-58475

Name of the Vulnerable Software and Affected Versions Sustainable Irrigation Platform (SIP) versions prior to 5.2.17

Description A stored cross-site scripting issue exists where unauthenticated attackers can inject arbitrary JavaScript by providing malicious payloads within program names submitted via HTTP requests. The flaw occurs because the application fails to perform output encoding on rendered program names, allowing the script to execute in the browsers of users who view the affected page. This is further facilitated if a passphrase is not required or if the default passphrase opendoor is used.

Recommendations Update Sustainable Irrigation Platform (SIP) to version 5.2.17 or later. Change the default passphrase opendoor to a strong, unique passphrase.