CVE-2026-78306

Name of the Vulnerable Software and Affected Versions DJI Neo versions prior to 01.00.0400 DJI Neo 2 versions prior to 01.00.0500 DJI Flip versions prior to 01.00.1200 DJI Air 3 versions prior to 01.00.1600 DJI Air 3S versions prior to 01.00.1400 DJI Avata 2 versions prior to 01.00.0400 DJI Avata 360 versions prior to 01.00.0300 DJI Mavic 3 versions prior to 01.00.1400 DJI Mavic 3 Classic versions prior to 01.00.0800 DJI Mavic 3 Pro versions prior to 01.01.0700 DJI Mavic 4 Pro versions prior to 01.00.0500 DJI Mini 2 versions prior to 01.07.0200 DJI Mini 3 versions prior to 01.00.0500 DJI Mini 3 Pro versions prior to 01.00.0900 DJI Mini 4 Pro versions prior to 01.00.1100 DJI Mini 5 Pro versions prior to 01.00.0600

Description An unauthenticated DUML command interface is exposed over Bluetooth, allowing an attacker within range to modify Wi-Fi configuration parameters such as the SSID, PSK, MAC address, regulatory country code, and wireless channel. By overwriting the Wi-Fi PSK with a known value, an attacker can connect to the internal Wi-Fi network to potentially access the flight control interface and issue flight commands. Additionally, crafted DUML commands can disable or restart Wi-Fi and Bluetooth interfaces, disconnect clients, or reset wireless configurations, leading to a denial-of-service condition that disrupts wireless control, video, and telemetry connections during flight.

Recommendations Update firmware for DJI Neo to version 01.00.0400 or later. Update firmware for DJI Neo 2 to version 01.00.0500 or later. Update firmware for DJI Flip to version 01.00.1200 or later. Update firmware for DJI Air 3 to version 01.00.1600 or later. Update firmware for DJI Air 3S to version 01.00.1400 or later. Update firmware for DJI Avata 2 to version 01.00.0400 or later. Update firmware for DJI Avata 360 to version 01.00.0300 or later. Update firmware for DJI Mavic 3 to version 01.00.1400 or later. Update firmware for DJI Mavic 3 Classic to version 01.00.0800 or later. Update firmware for DJI Mavic 3 Pro to version 01.01.0700 or later. Update firmware for DJI Mavic 4 Pro to version 01.00.0500 or later. Update firmware for DJI Mini 2 to version 01.07.0200 or later. Update firmware for DJI Mini 3 to version 01.00.0500 or later. Update firmware for DJI Mini 3 Pro to version 01.00.0900 or later. Update firmware for DJI Mini 4 Pro to version 01.00.1100 or later. Update firmware for DJI Mini 5 Pro to version 01.00.0600 or later.