Vendor
DJI
30 known vulnerabilities in products by DJI, 0 of them actively exploited (CISA KEV).
Key figures
30
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-114355 | DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root | — | |
| High | CVE-2020-29664 | DJI Mavic 2 Firmware: Command Injection | 7.8 | |
| Critical | CVE-2026-114357 | DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0) | — | |
| Critical | CVE-2026-78251 | DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory | — | |
| Critical | CVE-2022-46415 | DJI Spark Firmware: security vulnerability | 9.1 | |
| High | CVE-2026-78255 | DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media | — | |
| High | CVE-2026-128909 | DJI AeroScope Mobile: Firmware updates are not signature-verified | 8.8 | |
| High | CVE-2026-128908 | DJI AeroScope Mobile: OS command injection leads to root code execution | 8.8 | |
| High | CVE-2026-114354 | DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root | — | |
| Not rated | CVE-2007-1074 | DJI Newsbin Pro: Buffer Overflow | — | |
| Critical | CVE-2026-77812 | Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE | — | |
| High | CVE-2026-78306 | DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution | — | |
| High | CVE-2026-114353 | DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution | — | |
| High | CVE-2026-114356 | DJI CrystalSky ZS600C DJIUpdateService binder exposes privileged operations without authorization | — | |
| Medium | CVE-2026-128910 | DJI AeroScope Mobile: Hard-coded root password on the serial console | 6.8 | |
| High | CVE-2026-26673 | DJI Mavic Mini Firmware: Denial of Service | 7.5 | |
| Medium | CVE-2026-78321 | DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion | — | |
| Medium | CVE-2026-128907 | DJI AeroScope Mobile: Missing authentication on the management interface | 4.3 | |
| High | CVE-2022-29945 | DJI Air 2 Firmware: security vulnerability | 4.0 | |
| Medium | CVE-2023-6951 | DJI Mavic 3 Pro: Small Space of Random Values | 6.6 | |
| Medium | CVE-2023-51454 | DJI Mavic 3 Pro: Out-of-bounds Write | 6.8 | |
| Medium | CVE-2023-51456 | DJI Mavic 3 Pro: Out-of-bounds Read | 6.8 | |
| Medium | CVE-2023-51455 | DJI Mavic 3 Pro: Improper Validation of Array Index | 6.8 | |
| Low | CVE-2026-1743 | DJI Mavic Mini/Air/Spark/Mini SE Enhanced Wi-Fi Pairing authentication replay | 3.1 | |
| Medium | CVE-2025-10250 | DJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded key | 5.0 |
Products
| Mini 3 Pro | 14 | 0 |
| Mavic 3 | 12 | 0 |
| Mavic 3 Classic | 12 | 0 |
| Mavic 3 Pro | 12 | 0 |
| Matrice 300 | 7 | 0 |
| Matrice M30 | 7 | 0 |
| Mavic 3 Enterprise | 7 | 0 |
| Air 3 | 5 | 0 |
| Air 3s | 5 | 0 |
| Avata 2 | 5 | 0 |
| Avata 360 | 5 | 0 |
| Crystalsky Zs600c | 5 | 0 |
| DJI Neo | 5 | 0 |
| Mavic 4 Pro | 5 | 0 |
| Mini 2 | 5 | 0 |
| Mini 3 | 5 | 0 |
| Mini 4 Pro | 5 | 0 |
| Mini 5 Pro | 5 | 0 |
| Neo 2 | 5 | 0 |
| DJI Flip | 4 | 0 |