Skip to content
Threat Feed
Subscribe

Product

Sustainable Irrigation Platform (SIP) <= 5.2.16

2 briefs RSS
high threat

CVE-2026-60114 Sustainable Irrigation Platform Path Traversal Vulnerability

A path traversal vulnerability (CVE-2026-60114) in Sustainable Irrigation Platform (SIP) through version 5.2.16 allows attackers with access to the restore functionality to write files to arbitrary locations by uploading crafted JSON backup files containing unvalidated keys, leading to potential remote code execution, persistence, and privilege escalation.

exploited Sustainable Irrigation Platform path-traversal arbitrary-file-write web-application remote-code-execution persistence privilege-escalation
3t 1c
critical advisory

Command Injection in Sustainable Irrigation Platform cli_control Plugin

A critical command injection vulnerability (CVE-2026-58479) exists in the optional cli_control plugin of Sustainable Irrigation Platform (SIP) versions up to 5.2.16, allowing unauthenticated or CSRF attackers to execute arbitrary operating-system commands by storing a malicious payload via the plugin's HTTP endpoint and triggering execution by activating an associated irrigation station.

Sustainable Irrigation Platform +1 command-injection web-vulnerability rce ot ics cve-2026-58479
3t 3c