The Sustainable Irrigation Platform (SIP) by Dan-in-CA through version 5.2.16 is affected by a mass assignment vulnerability (CVE-2026-58477). This flaw allows unauthenticated attackers to modify sensitive configuration attributes by supplying arbitrary parameter names in HTTP requests. The vulnerability extends to cross-site request forgery attacks because of inadequate validation of incoming requests. The issue enables attackers to overwrite critical settings such as the system passphrase and listening port, potentially impacting system integrity and availability. No official patch or remediation guidance has been provided yet.

Attackers can overwrite sensitive configuration parameters without authentication, including passphrase and listening port settings. This can lead to unauthorized control or disruption of the affected system. The vulnerability also allows exploitation via cross-site request forgery, increasing the attack surface. The high CVSS score reflects the ease of exploitation and the potential impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected system to trusted networks and monitor for unusual configuration changes. Implement additional request validation or web application firewall rules to mitigate mass assignment and CSRF attack vectors if possible.