DJI CrystalSky ZS600C

• CVE-2026-114357 High 7.0 DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0) 0.3%
• CVE-2026-114356 High 7.0 DJI CrystalSky ZS600C DJIUpdateService binder exposes privileged operations without authorization 0.1%
• CVE-2026-114355 High 8.6 DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root 1.2%
• CVE-2026-114354 High 8.6 DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root 0.1%
• CVE-2026-114353 High 7.0 DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution 0.2%