Vulnerability Description
An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi transmission subsystem
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dji | Mavic Mini Firmware | <= 01.00.0600 |
| Dji | Mavic Mini | - |
| Dji | Spark Firmware | <= 01.00.1000 |
| Dji | Spark | - |
| Dji | Mini Se Firmware | <= 01.02.0000 |
| Dji | Mini Se | - |
Related Weaknesses (CWE)
References
- https://github.com/ByteMe1001/DJI-CatNectExploitThird Party Advisory
FAQ
What is CVE-2026-26673?
CVE-2026-26673 is a vulnerability with a CVSS score of 7.5 (HIGH). An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi transmission subsystem
How severe is CVE-2026-26673?
CVE-2026-26673 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-26673?
Check the references section above for vendor advisories and patch information. Affected products include: Dji Mavic Mini Firmware, Dji Mavic Mini, Dji Spark Firmware, Dji Spark, Dji Mini Se Firmware.