Dji vulnerabilities

Products

• Mini 3 Pro 14
• Mavic 3 12
• Mavic 3 Classic 12
• Mavic 3 Pro 12
• Matrice 300 7
• Matrice M30 7
• Mavic 3 Enterprise 7
• Air 3 5
• Air 3s 5
• Avata 2 5
• Avata 360 5
• Crystalsky Zs600c 5
• Mavic 4 Pro 5
• Mini 2 5
• Mini 3 5
• Mini 4 Pro 5
• Mini 5 Pro 5
• Neo 5
• Neo 2 5
• Flip 4
• Mavic 3 Firmware 4
• Mini 3 Pro Firmware 4
• Matrice 300 Firmware 3
• Matrice M30 Firmware 3
• Mavic 3 Pro Firmware 3
• Mavic Mini 2
• Mini Se Firmware 2
• Spark 2
• Spark Firmware 2

Newest

• dji crystalsky zs600c DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0) CVE-2026-114357 7.0 HighOctober 23, 2026
• dji crystalsky zs600c DJI CrystalSky ZS600C DJIUpdateService binder exposes privileged operations without authorization CVE-2026-114356 7.0 HighOctober 23, 2026
• dji crystalsky zs600c DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root CVE-2026-114355 8.6 HighOctober 23, 2026
• dji crystalsky zs600c DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root CVE-2026-114354 8.6 HighOctober 23, 2026
• dji crystalsky zs600c DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution CVE-2026-114353 7.0 HighOctober 23, 2026
• dji air 3, air 3s, avata 2 +13 more +15 more DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion CVE-2026-78321 6.0 MediumAugust 24, 2026
• dji air 3, air 3s, avata 2 +13 more +15 more DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution CVE-2026-78306 Public exploit 8.5 HighAugust 24, 2026
• dji air 3, air 3s, avata 2 +13 more +15 more DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media CVE-2026-78255 8.7 HighAugust 24, 2026
• dji air 3, air 3s, avata 2 +13 more +15 more DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory CVE-2026-78251 9.3 CriticalAugust 24, 2026
• dji air 3, air 3s, avata 2 +13 more +15 more Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE CVE-2026-77812 Public exploit 9.4 CriticalAugust 21, 2026
• dji spark perwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink CVE-2026-17459 5.3 MediumJuly 26, 2026
• dji mavic mini firmware, mini se firmware, spark firmware +2 more An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote... CVE-2026-26673 7.5 HighMarch 4, 2026
• dji air, mavic mini, mini se +1 more +3 more DJI Mavic Mini/Air/Spark/Mini SE Enhanced Wi-Fi Pairing authentication replay CVE-2026-1743 2.3 LowFebruary 2, 2026
• dji mavic air, mavic mini, mavic spark +2 more DJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded key CVE-2025-10250 2.3 LowSeptember 11, 2025
• dji matrice 300, matrice m30, mavic 3 +9 more +11 more A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone... CVE-2023-51456 6.8 MediumApril 2, 2024
• dji matrice 300, matrice m30, mavic 3 +9 more +11 more A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI... CVE-2023-51455 6.8 MediumApril 2, 2024
• dji matrice 300, matrice m30, mavic 3 +9 more +11 more A Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on... CVE-2023-51454 6.8 MediumApril 2, 2024
• dji matrice 300, matrice m30, mavic 3 +4 more +6 more A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone... CVE-2023-51453 3.0 LowApril 2, 2024
• dji matrice 300, matrice m30, mavic 3 +4 more +6 more A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone... CVE-2023-51452 3.0 LowApril 2, 2024
• dji matrice 300, matrice m30, mavic 3 +4 more +6 more A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI... CVE-2023-6951 6.6 MediumApril 2, 2024
• dji mini 3 pro ** DISPUTED ** An Improper Input Validation vulnerability affecting the FTP service running on... CVE-2023-6950 Disputed 3.0 LowApril 2, 2024
• dji mini 3 pro, mini 3 pro firmware +1 more ** DISPUTED ** A Missing Authentication for Critical Function issue affecting the HTTP service... CVE-2023-6949 Disputed 5.2 MediumApril 2, 2024
• dji matrice 300, matrice m30, mavic 3 +4 more +6 more A Buffer Copy without Checking Size of Input issue affecting the v2_sdk_service running on a set... CVE-2023-6948 3.0 LowApril 2, 2024
• dji spark firmware DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the devi… CVE-2022-46415 9.1 CriticalMarch 27, 2023
• dji air 2 firmware, air 2s firmware, fhantom 4 pro firmware +8 more +10 more DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone... CVE-2022-29945 4.0 MediumApril 29, 2022
• dji mavic 2 firmware A command injection issue in dji_sys in DJI Mavic 2 Remote Controller before firmware version 01... CVE-2020-29664 7.8 HighFebruary 18, 2021
• dji newsbin pro Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote... CVE-2007-1074 Public exploit 9.3 HighFebruary 22, 2007