CVE-2026-93971

MEDIUM 5.3

aiyiyi121 SxDevOps settings.py information disclosure

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevops/settings.py. This manipulation causes information disclosure. It is possible to initiate the attack remotely. Patch name: 2b4bf8585c3e731e7a8af30801ea46680bc783f9. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

CWE	CWE-200 CWE-284
Vendor	aiyiyi121
Product	sxdevops
Published	Sep 20, 2026

Stay Ahead of the Next One

Get instant alerts for aiyiyi121 sxdevops

Be the first to know when new medium vulnerabilities affecting aiyiyi121 sxdevops are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

aiyiyi121 / SxDevOps

1.0 1.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/407930 vuldb.com: https://vuldb.com/vuln/407930/cti vuldb.com: https://vuldb.com/cve/CVE-2026-93971 vuldb.com: https://vuldb.com/submit/944386 github.com: https://github.com/aiyiyi121/sxdevops/issues/16 github.com: https://github.com/aiyiyi121/sxdevops/commit/2b4bf8585c3e731e7a8af30801ea46680bc783f9 github.com: https://github.com/aiyiyi121/sxdevops/

Credits

🔍 _lxf (VulDB User) VulDB CNA Team