7.5High
CVE-2026-26673
Description
An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi transmission subsystem
Weakness (CWE):
CWE-400
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| dji | mavic mini firmware | ≤ 01.00.0600 | |
| dji | mini se firmware | ≤ 01.02.0000 | |
| dji | spark firmware | ≤ 01.00.1000 |
References and patches
- https://github.com/ByteMe1001/DJI-CatNect ExploitThird Party Advisory
CPE matches (NVD) (3)
cpe:2.3:o:dji:mavic_mini_firmware:*:*:*:*:*:*:*:*≤ 01.00.0600cpe:2.3:o:dji:spark_firmware:*:*:*:*:*:*:*:*≤ 01.00.1000cpe:2.3:o:dji:mini_se_firmware:*:*:*:*:*:*:*:*≤ 01.02.0000