HIGH🇵🇱 Wersja polska

CVE-2026-26673

CVSS 7.5v3.1pub. 2026-03-04upd. 2026-03-05

An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi transmission subsystem

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Dji Mavic Mini

    HW
    Dji
    all versions

  • Dji Mavic Mini Firmware

    OS
    Dji
    ≤ 01.00.0600

  • Dji Mini Se

    HW
    Dji
    all versions

  • Dji Mini Se Firmware

    OS
    Dji
    ≤ 01.02.0000

  • Dji Spark

    HW
    Dji
    all versions

  • Dji Spark Firmware

    OS
    Dji
    ≤ 01.00.1000
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2022-46415CRITICAL9.1PL ✓same product

DJI Spark – wyczerpanie puli DHCP uniemożliwiające połączenia

CVE-2022-29945MEDIUM4.0same product

DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physi...

CVE-2020-29664HIGH7.8same vendor

A command injection issue in dji_sys in DJI Mavic 2 Remote Controller before firmware version 01.00.0510 allow...

CVE-2007-1074HIGH9.3same vendor

Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote attackers to exec...