PT-2026-22938 · Dji · Dji Mini Se+4

Byteme1001 · Publicado 2026-03-04 · Atualizado 2026-03-04 · CVE-2026-26673

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions DJI Mavic Mini versions 0.1.00.0500 and below DJI Spark versions 0.1.00.0500 and below DJI Mavic Air versions 0.1.00.0500 and below DJI Mini versions 0.1.00.0500 and below DJI Mini SE versions 0.1.00.0500 and below

Description A flaw exists in the DJI Enhanced-WiFi transmission subsystem that allows a remote attacker to trigger a denial of service.

Recommendations Update DJI Mavic Mini to a version later than 0.1.00.0500. Update DJI Spark to a version later than 0.1.00.0500. Update DJI Mavic Air to a version later than 0.1.00.0500. Update DJI Mini to a version later than 0.1.00.0500. Update DJI Mini SE to a version later than 0.1.00.0500.

Exploit

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2026-26673

Produtos afetados

Dji Mavic Air

Dji Mavic Mini

Dji Mini

Dji Mini Se

Dji Spark

Referências · 5

• 🔥 https://github.com/ByteMe1001/DJI-CatNect · Exploit
• https://twitter.com/VulmonFeeds/status/2029239082975379467 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-26673 · Nota de Segurança
• https://twitter.com/CVEnew/status/2029272861454586343 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-26673 · Aviso do Fabricante