Information Disclosure Vulnerability in SxDevOps by aiyiyi121
CVE-2026-93971

6.9MEDIUM

Key Information:

Vendor

Aiyiyi121

Status
Sxdevops
Vendor
CVE Published:
20 September 2026

What is CVE-2026-93971?

A vulnerability has been detected in SxDevOps versions 1.0 and 1.1, specifically within an undisclosed function in the backend settings.py file. This flaw may allow an attacker to gain unauthorized access to sensitive information remotely. To protect users, aiyiyi121 has promptly released a patch, identified by the commit hash 2b4bf8585c3e731e7a8af30801ea46680bc783f9, which addresses the issue effectively. Users are strongly encouraged to apply this update to ensure their systems remain secure.

Affected Version(s)

SxDevOps 1.0

SxDevOps 1.1

References

https://vuldb.com/vuln/407930
vdb-entry
https://vuldb.com/vuln/407930/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-93971
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

_lxf (VulDB User)
VulDB CNA Team
.