Dji Air 3s
5 CVEs affecting Dji Air 3s. Latest disclosed: 2026-08-24. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-78321 | | 2026-08-24 | The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's interna… | |
CVE-2026-78306 | | 2026-08-24 | DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration paramet… | |
CVE-2026-78255 | | 2026-08-24 | The HTTP media server running on DJI drones serves stored photos and videos through the `/v2` endpoint without authenticating the requesting client. Filenames… | |
CVE-2026-78251 | | 2026-08-24 | DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits… | |
CVE-2026-77812 | | 2026-08-21 | DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. When a client attempts to connec… |