OCTOBER 10, 2026
Live Feed
Back to database
Case File

CVE-2026-93969

HIGH · CVSS 7.3 EPSS 0.50% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-20 · Last synced 2026-10-10

CyberRota Analysis

AI-Generated

Aiyiyi121 SxDevOps versions 1.0 and 1.1 are vulnerable due to hard-coded credentials in the ensure_default_superuser function of rbac/services.py, allowing for remote exploitation. This high-severity vulnerability poses a significant risk to systems utilizing these versions, as it can lead to unauthorized access. Organizations using affected versions should prioritize applying the provided patch to mitigate potential security breaches.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-93969
Severity
HIGH
CVSS
7.3
EPSS
0.50%

Original NVD Description

A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_superuser of the file rbac/services.py. The manipulation leads to hard-coded credentials. The attack is possible to be carried out remotely. The identifier of the patch is 2b4bf8585c3e731e7a8af30801ea46680bc783f9. It is recommended to apply a patch to fix this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.