DJI Air 3

• CVE-2026-78321 Medium 6.0 DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion 0.2%
• CVE-2026-78306 High 8.5 DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution 0.2%
• CVE-2026-78255 High 8.7 DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media 0.4%
• CVE-2026-78251 Critical 9.3 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory 0.4%
• CVE-2026-77812 Critical 9.4 Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE <0.1%