CVE-2026-93967 | aiyiyi121 SxDevOps 1.0/1.1 Command services.py generate_host_task command command injection (Issue 16)

September 19, 2026 Yanac

A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1. It has been rated as problematic. Affected by this issue is the function generate_host_task of the file backend/aiops/services.py of the component Command Handler. Performing a manipulation of the argument command results in command injection.

This vulnerability is known as CVE-2026-93967. Remote exploitation of the attack is possible. No exploit is available.

Applying a patch is the recommended action to fix this issue.

The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.VulDB Recent EntriesRead More