CVE-2026-26673

HIGH

DJI Mavic Mini/Spark/Air <0.1.00.0500 - DoS

Title source: llm
STIX 2.1

Description

An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi transmission subsystem

Scores

CVSS v3 7.5
EPSS 0.0023
EPSS Percentile 45.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-400
Status published
Products (3)
dji/mavic_mini_firmware < 01.00.0600
dji/mini_se_firmware < 01.02.0000
dji/spark_firmware < 01.00.1000
Published Mar 04, 2026
Tracked Since Mar 04, 2026