CVE-2026-93965Proof of concept (PoC) published · CISA
aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection
CVSS score
5.1
EPSS probability
%1.9
Risk score
0.1
Published
25 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
5.1
CVE-2026-93966
aiyiyi121 SxDevOps TASK_RUN_COMMAND host_tasks.py paramiko.SSHClient.exec_command command injection
A
Patch verifiedEPSS %2
6.9
CVE-2026-93971
aiyiyi121 SxDevOps settings.py information disclosure
A
Patch verifiedEPSS %1
5.1
CVE-2026-93967
aiyiyi121 SxDevOps Command services.py generate_host_task command injection
A
Patch verifiedEPSS %1
6.9
CVE-2026-93970
aiyiyi121 SxDevOps Settings settings.py hard-coded credentials
A
Patch verifiedEPSS %1
6.9
CVE-2026-93969
aiyiyi121 SxDevOps services.py ensure_default_superuser hard-coded credentials
A
Patch verifiedEPSS %1
5.1
CVE-2026-93968
aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management
A
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-93965"