Is CVE-2026-58479 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-58479 being exploited in the wild.

How severe is CVE-2026-58479?

Critical severity, with a CVSS score of 9.8, published 14 July 2026.

Which products and versions are affected?

Dan-in-CA Sustainable Irrigation Platform through 5.2.16.

Is there a fix for CVE-2026-58479?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-58479 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-58479?

Check whether you run Dan-in-CA Sustainable Irrigation Platform at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-58479: Dan-in-CA Sustainable Irrigation Platform command injection in cli_control plugin

CVE-2026-58479 · Severity: critical · CVSS 9.8 · Published 2026-07-14

The Sustainable Irrigation Platform (SIP), a system used to manage automated irrigation, contains a critical security flaw in its optional command-line control plugin. An attacker can remotely send malicious commands to the system without needing a password, or by using the default password 'opendoor'. If exploited, this allows an unauthorized person to take full control of the irrigation controller, potentially disrupting water management operations or using the device as a foothold to attack other systems on the network.

Technologies: Dan-in-CA Sustainable Irrigation Platform. Vendors: Dan-in-CA.

Quick answers

Is CVE-2026-58479 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-58479 being exploited in the wild.
How severe is CVE-2026-58479?: Critical severity, with a CVSS score of 9.8, published 14 July 2026.
Which products and versions are affected?: Dan-in-CA Sustainable Irrigation Platform through 5.2.16.
Is there a fix for CVE-2026-58479?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-58479 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-58479?: Check whether you run Dan-in-CA Sustainable Irrigation Platform at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A command injection vulnerability exists in the optional 'cli_control' plugin of the Sustainable Irrigation Platform (SIP) through version 5.2.16. The flaw is located in the plugin's HTTP endpoint, which fails to properly neutralize special elements used in OS commands. An unauthenticated attacker, or one leveraging Cross-Site Request Forgery (CSRF), can store a malicious payload via this endpoint. The payload is executed when the associated irrigation station is activated. The attack is facilitated by the lack of mandatory passphrase protection or the use of the default passphrase 'opendoor', leading to full remote code execution (RCE) on the underlying host.

Affected products

Dan-in-CA Sustainable Irrigation Platform (SIP) through 5.2.16

Timeline

2026-07-14: advisory: Initial disclosure by VulnCheck and Zero Science Lab

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.