CVE-2026-93969

HIGH 7.3

aiyiyi121 SxDevOps services.py ensure_default_superuser hard-coded credentials

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_superuser of the file rbac/services.py. The manipulation leads to hard-coded credentials. The attack is possible to be carried out remotely. The identifier of the patch is 2b4bf8585c3e731e7a8af30801ea46680bc783f9. It is recommended to apply a patch to fix this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

CWE	CWE-798 CWE-259
Vendor	aiyiyi121
Product	sxdevops
Published	Sep 20, 2026

Stay Ahead of the Next One

Get instant alerts for aiyiyi121 sxdevops

Be the first to know when new high vulnerabilities affecting aiyiyi121 sxdevops are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

aiyiyi121 / SxDevOps

1.0 1.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/407928 vuldb.com: https://vuldb.com/vuln/407928/cti vuldb.com: https://vuldb.com/cve/CVE-2026-93969 vuldb.com: https://vuldb.com/submit/944384 github.com: https://github.com/aiyiyi121/sxdevops/issues/16 github.com: https://github.com/aiyiyi121/sxdevops/commit/2b4bf8585c3e731e7a8af30801ea46680bc783f9 github.com: https://github.com/aiyiyi121/sxdevops/

Credits

🔍 _lxf (VulDB User) VulDB CNA Team