DJI Mavic 3

• CVE-2026-78321 Medium 6.0 DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion 0.2%
• CVE-2026-78306 High 8.5 DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution 0.2%
• CVE-2026-78255 High 8.7 DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media 0.4%
• CVE-2026-78251 Critical 9.3 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory 0.4%
• CVE-2026-77812 Critical 9.4 Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE <0.1%
• CVE-2023-51456 Medium 6.8 A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to trigger an out-of-bound read/write into the process me 0.2%
• CVE-2023-51455 Medium 6.8 A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to corrupt a controlled memory location due to a 0.2%
• CVE-2023-51454 Medium 6.8 A Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to overwrite a pointer in the process memory through a crafted 0.2%
• CVE-2023-51453 Low 3.0 A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload 0.2%
• CVE-2023-51452 Low 3.0 A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload 0.2%
• CVE-2023-6951 Medium 6.6 A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to derive the WPA2 PSK key and authenticate without permission to the 0.3%
• CVE-2023-6948 Low 3.0 A Buffer Copy without Checking Size of Input issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through 0.2%