dji
Top products
Latest CVEs
The 15 most recently published vulnerabilities affecting dji.
- CVE-2026-78321DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion
- CVE-2026-78306DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution
- CVE-2026-78255DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media
- CVE-2026-78251DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory
- CVE-2026-77812Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE
- CVE-2026-26673An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi transmission subsystem7.5
- CVE-2026-1743DJI Mavic Mini/Air/Spark/Mini SE Enhanced Wi-Fi Pairing authentication replay3.1
- CVE-2025-10250DJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded key5.0
- CVE-2023-51456A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to trigger an out-of-bound read/write into the process...6.8
- CVE-2023-51455A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to corrupt a controlled memory location due t...6.8
- CVE-2023-51454A Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to overwrite a pointer in the process memory through a craft...6.8
- CVE-2023-51453A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payl...3.0
- CVE-2023-51452A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payl...3.0
- CVE-2023-6951A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to derive the WPA2 PSK key and authenticate without permission to ...6.6
- CVE-2023-6950An Improper Input Validation vulnerability affecting the FTP service running on the DJI Mavic Mini 3 Pro could allow an attacker to craft a malicious packet containing a malformed path provided to ...3.0