Advisories · Technology

DJI Mini 3 Pro.

Every CVE that names DJI Mini 3 Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-78321 CVE record

CVSS 6.0 Medium

DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion
- DJI Neo
- DJI Neo 2
- Denial of service
Not analysed yet 24 Aug 2026
CVE-2026-78306 CVE record

CVSS 8.5 High

DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution
- DJI Neo
- DJI Neo 2
- Authentication bypass
Not analysed yet 24 Aug 2026
CVE-2026-78255 CVE record

CVSS 8.7 High

DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media
- DJI Neo
- DJI Neo 2
- Authentication bypass
Not analysed yet 24 Aug 2026
CVE-2026-78251 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory
- DJI Neo
- DJI Neo 2
- Hard-coded credentials
Not analysed yet 24 Aug 2026
CVE-2026-77812 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE
- DJI Neo
- DJI Neo 2
- Weak cryptography or TLS
Not analysed yet 21 Aug 2026
CVE-2023-51456 CVE record

CVSS 6.8 Medium

Out-of-bounds read in DJI Mavic 3 Pro and others
- DJI Mavic 3 Pro
- DJI Mavic 3
- Memory corruption
Not analysed yet 2 Apr 2024
CVE-2023-51455 CVE record

CVSS 6.8 Medium

Improper array index validation in DJI Mavic 3 Pro and others
- DJI Mavic 3 Pro
- DJI Mavic 3
- CWE-129
Not analysed yet 2 Apr 2024
CVE-2023-51454 CVE record

CVSS 6.8 Medium

Out-of-bounds write in DJI Mavic 3 Pro and others
- DJI Mavic 3 Pro
- DJI Mavic 3
- Memory corruption
Not analysed yet 2 Apr 2024
CVE-2023-51453 CVE record

CVSS 3.0 Low

Out-of-bounds write in DJI Mavic 3 Pro and others
- DJI Mavic 3 Pro
- DJI Mavic 3
- Memory corruption
Not analysed yet 2 Apr 2024
CVE-2023-51452 CVE record

CVSS 3.0 Low

Out-of-bounds write in DJI Mavic 3 Pro and others
- DJI Mavic 3 Pro
- DJI Mavic 3
- Memory corruption
Not analysed yet 2 Apr 2024
CVE-2023-6951 CVE record

CVSS 6.6 Medium

DJI Mavic 3 Pro: A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of…
- DJI Mavic 3 Pro
- DJI Mavic 3
- CWE-334
Not analysed yet 2 Apr 2024
CVE-2023-6950 CVE record

CVSS 3.0 Low

DJI Mini 3 Pro: An Improper Input Validation vulnerability affecting the FTP service running on the DJI…
- DJI Mini 3 Pro
- CWE-1286
Not analysed yet 2 Apr 2024
CVE-2023-6949 CVE record

CVSS 5.2 Medium

Missing authentication in DJI Mini 3 Pro
- DJI Mini 3 Pro
- Authentication bypass
Not analysed yet 2 Apr 2024
CVE-2023-6948 CVE record

CVSS 3.0 Low

Buffer overflow in DJI Mavic 3 Pro and others
- DJI Mavic 3 Pro
- DJI Mavic 3
- Memory corruption
Not analysed yet 2 Apr 2024