Dji Flip
4 CVEs affecting Dji Flip. Latest disclosed: 2026-08-24. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-78321 | | 2026-08-24 | The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's interna… | |
CVE-2026-78306 | | 2026-08-24 | DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration paramet… | |
CVE-2026-78255 | | 2026-08-24 | The HTTP media server running on DJI drones serves stored photos and videos through the `/v2` endpoint without authenticating the requesting client. Filenames… | |
CVE-2026-78251 | | 2026-08-24 | DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits… |