[ Vendor · 5 CVEs ]
DJI
CVEs affecting DJI published in the last 30 days, plus any DJI CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114357 | 23 Oct 2026 | CVSS 9.3 | DJI CrystalSky ZS600CMissing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9… | |
| CVE-2026-114355 | 23 Oct 2026 | CVSS 8.6 | DJI CrystalSky ZS600COS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a… | |
| CVE-2026-114356 | 23 Oct 2026 | CVSS 7.0 | DJI CrystalSky ZS600CMissing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android… | |
| CVE-2026-114354 | 23 Oct 2026 | CVSS 8.6 | DJI CrystalSky ZS600CMissing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky ZS600C firmware v0.3.9.7 through… | |
| CVE-2026-114353 | 23 Oct 2026 | CVSS 7.0 | DJI CrystalSky ZS600CHidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on… |