Skip to content
OpenAdvisories

Product · DJI

Mini 3

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-78306 Public exploit

    DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution

    DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacke…

    DJI Mini 3 Pro Mavic 3 Classic Mavic 3
  • Critical 9.4
    CVE-2026-77812 Public exploit

    Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE

    DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly applicat…

    DJI Mini 3 Pro Mavic 3 Classic Mavic 3