CVE-2026-93971
Received Received - Intake

Information Disclosure in SxDevOps Backend

Publication date: 2026-09-20

Last updated on: 2026-09-20

Assigner: VulDB

Description
A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevops/settings.py. This manipulation causes information disclosure. It is possible to initiate the attack remotely. Patch name: 2b4bf8585c3e731e7a8af30801ea46680bc783f9. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-20
Last Modified
2026-09-20
Generated
2026-09-20
AI Q&A
2026-09-20
EPSS Evaluated
N/A
NVD
CVE-2026-93971
EUVD
EUVD-2026-83707

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
aiyiyi121 sxdevops to 1.1 (inc)
aiyiyi121 sxdevops 1.0
aiyiyi121 sxdevops 1.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an information disclosure weakness in aiyiyi121 SxDevOps versions 1.0 and 1.1. It exists in the backend/sxdevops/settings.py file and allows remote attackers to access sensitive information without authentication.

Impact Analysis

The vulnerability enables unauthorized remote access to confidential data, potentially exposing sensitive information stored in the application. Attackers could exploit this to steal data without needing user interaction or special privileges.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA by allowing unauthorized access to personal or health data. Organizations may face legal penalties, reputational damage, and loss of trust due to data breaches.

Mitigation Strategies

Install the patch provided by the vendor: 2b4bf8585c3e731e7a8af30801ea46680bc783f9. Update the affected file backend/sxdevops/settings.py to the fixed version.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93971. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart