CVE-2026-58475 is a stored cross-site scripting vulnerability in Dan-in-CA SIP versions up to and including 5.2.16. Attackers can inject malicious JavaScript code into program names submitted via HTTP requests, which are then rendered without proper output encoding on web pages viewed by users. This allows execution of arbitrary JavaScript in the context of affected users' browsers. The vulnerability is exacerbated by the lack of a required passphrase or the use of a default passphrase 'opendoor', enabling unauthenticated attackers to exploit the issue. No official remediation or patch has been indicated in the available data.

Successful exploitation allows unauthenticated attackers to execute arbitrary JavaScript in the browsers of users viewing affected pages. This can lead to session hijacking, defacement, or other client-side attacks depending on the injected script. The vulnerability affects confidentiality and integrity of user interactions with the affected web interface. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to enforce a strong passphrase different from the default 'opendoor' to reduce exploitation risk. Additionally, applying web application firewall (WAF) rules to detect and block malicious script payloads in HTTP requests may provide temporary mitigation.