PT-2026-24381 · Unknown · Px4-Autopilot

Npuwyw · Publicado 2026-03-10 · Atualizado 2026-03-23 · CVE-2026-26741

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions PX4 Autopilot versions 1.12.x through 1.15.x

Description The autopilot software contains a logic flaw in the mode switching mechanism. Specifically, when transitioning from Auto mode to Manual mode while the drone is in the "ARMED" state – after landing and before the automatic disarm triggered by the COM DISARM LAND parameter – a safety check for the physical throttle stick is missing. This can lead to loss of control, rapid uncontrolled ascent (flyaway), and potential property damage.

Recommendations Versions 1.12.x through 1.15.x should be updated when a fix is available.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-26741

Produtos afetados

Px4-Autopilot

Referências · 6

• https://twitter.com/infoflowcloud/status/2036025470819426809 · Publicação no Twitter
• https://t.me/CVEtracker/47013 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-26741 · Nota de Segurança
• https://github.com/npuwyw/PX4-Autopilot/blob/audit-v1.12.3-mode-transition-logic-flaw/PX4_Autopilot_Mode_Switching_Logic_Vulnerability.md · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-26741 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2036024264558801032 · Publicação no Twitter