CVE-2026-58476 is a CSRF vulnerability in Dan-in-CA SIP through version 5.2.16. It allows remote attackers to execute administrative actions such as disabling the passphrase, rebooting the device, deleting programs, or installing plugins by issuing HTTP GET requests without CSRF token validation or origin verification. The default configuration lacks a required passphrase and uses a default credential 'opendoor', exposing these endpoints to unauthenticated users. This vulnerability has a CVSS 4.0 base score of 7.0, indicating high severity. No official patch or remediation level has been published as of the data provided.

Exploitation of this vulnerability enables remote attackers to perform unauthorized administrative actions on affected SIP devices. These actions include disabling security features, rebooting devices, deleting critical programs, and installing potentially malicious plugins. The lack of CSRF protections combined with default weak credentials significantly increases the risk of compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to change default credentials immediately and restrict access to administrative interfaces. Administrators should avoid visiting untrusted websites while logged into the SIP administrative interface to reduce the risk of CSRF exploitation.