Vulnerability in Aiyiyi121 Sxdevops

CVE-2026-93969

A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_superuser of the file rbac/services.py. The manipulation leads to hard-coded credentials. The attack is possible to be carried out remotely. The identifier of the patch is 2b4bf8585c3e731e7a8af30801ea46680bc783f9. It is recommended to apply a patch to fix this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-93969?
CVE-2026-93969 is a high-severity vulnerability in Aiyiyi121 Sxdevops, classified under Use of Hard-coded Password. CVSS score: 7.3/10. Published 2026-09-20.
How severe is CVE-2026-93969?
High severity. CVSS v3 base score is 7.3 out of 10.