Skip to content
Threat Feed
Subscribe

Vendor

Sustainable Irrigation Platform

1 brief RSS
critical advisory

Command Injection in Sustainable Irrigation Platform cli_control Plugin

A critical command injection vulnerability (CVE-2026-58479) exists in the optional cli_control plugin of Sustainable Irrigation Platform (SIP) versions up to 5.2.16, allowing unauthenticated or CSRF attackers to execute arbitrary operating-system commands by storing a malicious payload via the plugin's HTTP endpoint and triggering execution by activating an associated irrigation station.

Sustainable Irrigation Platform +1 command-injection web-vulnerability rce ot ics cve-2026-58479
3t 3c