Skip to content
Dji Air vulnerabilities
-
dji air 3, air 3s, avata 2 +13 more +15 more
DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion
CVE-2026-78321
6.0 Medium
-
dji air 3, air 3s, avata 2 +13 more +15 more
DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution
CVE-2026-78306
Public exploit
8.5 High
-
dji air 3, air 3s, avata 2 +13 more +15 more
DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media
CVE-2026-78255
8.7 High
-
dji air 3, air 3s, avata 2 +13 more +15 more
DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory
CVE-2026-78251
9.3 Critical
-
dji air 3, air 3s, avata 2 +13 more +15 more
Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE
CVE-2026-77812
Public exploit
9.4 Critical
-
dji air, mavic mini, mini se +1 more +3 more
DJI Mavic Mini/Air/Spark/Mini SE Enhanced Wi-Fi Pairing authentication replay
CVE-2026-1743
2.3 Low
-
dji mavic air, mavic mini, mavic spark +2 more
DJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded key
CVE-2025-10250
2.3 Low
-
dji air 2 firmware, air 2s firmware, fhantom 4 pro firmware +8 more +10 more
DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone...
CVE-2022-29945
4.0 Medium