Vendor
DJI
21 known vulnerabilities.
Products
Mini 3 Pro 14
Mavic 3 12
Mavic 3 Classic 12
Mavic 3 Pro 12
Mavic 3 Enterprise 7
Matrice 300 7
Matrice M30 7
CrystalSky ZS600C 5
Neo 5
Neo 2 5
Air 3 5
Air 3S 5
Avata 2 5
Avata 360 5
Mavic 4 Pro 5
Mini 2 5
Mini 3 5
Mini 4 Pro 5
Mini 5 Pro 5
Flip 4
Mavic Mini 2
DJI Flip 1
Air 1
Spark 1
Mini SE 1
Mavic Spark 1
Mavic Air 1
2 results · Clear filters · Feed
-
High 8.5CVE-2026-78306 Public exploit
DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution
DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacke…
-
Critical 9.4CVE-2026-77812 Public exploit
Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE
DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly applicat…