PT-2026-22938 · Dji · Dji Mini Se+4

Byteme1001 · Published 2026-03-04 · Updated 2026-03-04 · CVE-2026-26673

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions DJI Mavic Mini versions 0.1.00.0500 and below DJI Spark versions 0.1.00.0500 and below DJI Mavic Air versions 0.1.00.0500 and below DJI Mini versions 0.1.00.0500 and below DJI Mini SE versions 0.1.00.0500 and below

Description A flaw exists in the DJI Enhanced-WiFi transmission subsystem that allows a remote attacker to trigger a denial of service.

Recommendations Update DJI Mavic Mini to a version later than 0.1.00.0500. Update DJI Spark to a version later than 0.1.00.0500. Update DJI Mavic Air to a version later than 0.1.00.0500. Update DJI Mini to a version later than 0.1.00.0500. Update DJI Mini SE to a version later than 0.1.00.0500.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2026-26673

Affected Products

Dji Mavic Air

Dji Mavic Mini

Dji Mini

Dji Mini Se

Dji Spark

References · 5

• 🔥 https://github.com/ByteMe1001/DJI-CatNect · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-26673 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26673 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2029239082975379467 · Twitter Post
• https://twitter.com/CVEnew/status/2029272861454586343 · Twitter Post