Skip to content
OpenAdvisories

Product · DJI

Mini 2

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-78306 Public exploit

    DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution

    DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacke…

    DJI Mini 3 Pro Mavic 3 Mavic 3 Pro
  • High 8.7
    CVE-2026-78255

    DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media

    The HTTP media server running on DJI drones serves stored photos and videos through the `/v2` endpoint without authenticating the requesting client. Filenames follow a predictable pattern, allowing an attacker who joins the drone's internal network to enumera…

    DJI Mini 3 Pro Mavic 3 Classic Mavic 3