CVE-2026-93970 | aiyiyi121 SxDevOps 1.0/1.1 Settings settings.py hard-coded credentials (Issue 16)

September 19, 2026 Yanac

A vulnerability labeled as critical has been found in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the component Settings Handler. The manipulation results in hard-coded credentials.

This vulnerability was named CVE-2026-93970. The attack may be performed from remote. There is no available exploit.

Applying a patch is advised to resolve this issue.

The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.VulDB Recent EntriesRead More