Is CVE-2026-93971 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-93971 being exploited in the wild.

How severe is CVE-2026-93971?

Medium severity, with a CVSS score of 5.3, published 20 September 2026.

Is there a fix for CVE-2026-93971?

A patch was published on 2026-09-06. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-93971 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-93971?

Check whether you run Aiyiyi121 SxDevOps at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-93971: aiyiyi121 SxDevOps information disclosure in settings.py

CVE-2026-93971 · Severity: medium · CVSS 5.3 · Published 2026-09-20

SxDevOps is an open-source intelligent operations platform for infrastructure management. A weakness in the settings configuration file allows remote attackers to disclose sensitive information without authentication. The vendor has released a patch to address this vulnerability.

Technologies: Aiyiyi121 SxDevOps. Vendors: Aiyiyi121.

Quick answers

Is CVE-2026-93971 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-93971 being exploited in the wild.
How severe is CVE-2026-93971?: Medium severity, with a CVSS score of 5.3, published 20 September 2026.
Which products and versions are affected?: Aiyiyi121 SxDevOps 1.0, 1.1.
Is there a fix for CVE-2026-93971?: A patch was published on 2026-09-06. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-93971 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-93971?: Check whether you run Aiyiyi121 SxDevOps at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An information disclosure vulnerability exists in backend/sxdevops/settings.py in SxDevOps versions 1.0 and 1.1, accessible via an unknown function. The vulnerability can be exploited remotely without requiring authentication or user interaction. A patch (commit 2b4bf8585c3e731e7a8af30801ea46680bc783f9) hardens security controls and is available from the vendor.

Affected products

aiyiyi121 SxDevOps 1.0, 1.1

Timeline

2026-09-20: disclosed
2026-09-06: patched

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.