What’s Vulnerable › Products

DJI CrystalSky ZS600C vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your DJI CrystalSky ZS600C version is affected

Latest DJI CrystalSky ZS600C vulnerabilities

• CVE-2026-114357 — DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0) (CVSS 9.3)
• CVE-2026-114356 — DJI CrystalSky ZS600C DJIUpdateService binder exposes privileged operations without authorization (CVSS 7.0)
• CVE-2026-114355 — DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root (CVSS 8.6)
• CVE-2026-114354 — DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root (CVSS 8.6)
• CVE-2026-114353 — DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution (CVSS 7.0)