Skip to content
OpenAdvisories

Vendor

DJI

25 known vulnerabilities.

Products

Mini 3 Pro 14 Mavic 3 12 Mavic 3 Classic 12 Mavic 3 Pro 12 Mavic 3 Enterprise 7 Matrice 300 7 Matrice M30 7 CrystalSky ZS600C 5 Neo 5 Neo 2 5 Air 3 5 Air 3S 5 Avata 2 5 Avata 360 5 Mavic 4 Pro 5 Mini 2 5 Mini 3 5 Mini 4 Pro 5 Mini 5 Pro 5 AeroScope Mobile (TP703) 4 AeroScope Mobile (TP703) 1300 communications board firmware 4 Flip 4 Mavic Mini 2 DJI Flip 1 Air 1 Spark 1 Mini SE 1 Mavic Spark 1 Mavic Air 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-114357

    DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0)

    Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain an unauthenticated shell (uid 2000), a foothold for privilege escalation to root.…

    DJI CrystalSky ZS600C
  • Critical 9.3
    CVE-2026-78251

    DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory

    DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in **/blackbox/upgrade/**, as well as overwrite …

    DJI Mini 3 Pro Mavic 3 Classic Mavic 3
  • Critical 9.4
    CVE-2026-77812 Public exploit

    Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE

    DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly applicat…

    DJI Mini 3 Pro Mavic 3 Classic Mavic 3