Skip to content
OpenAdvisories

Product · DJI

Flip

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-78251

    DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory

    DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in **/blackbox/upgrade/**, as well as overwrite …

    DJI Mini 3 Pro Mavic 3 Classic Mavic 3