What’s Vulnerable › Vulnerabilities

CVE-2026-26673

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-03-04 · updated 2026-06-17
• Weakness: CWE-400

Description

An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi transmission subsystem

Affected products

• DJI Mavic Mini Firmware: through 01.00.0600
• DJI Mini Se Firmware: through 01.02.0000
• DJI Spark Firmware: through 01.00.1000

References

• https://github.com/ByteMe1001/DJI-CatNect

Get alerted when CVE-2026-26673 or the next vulnerability affects your stack