Description
An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi transmission subsystem
Published: 2026-03-04
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Patch Now
AI Analysis

Impact

An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, and Mini SE models with firmware version 0.1.00.0500 or earlier permits a remote attacker to trigger a denial of service through the DJI Enhanced‑WiFi transmission subsystem. The weakness is identified as uncontrolled resource consumption (CWE-400), which can cause the drone’s software to become unresponsive or reset.

Affected Systems

Affected DJI hardware includes the Mavic Mini, Spark, Mavic Air, Mini, and Mini SE drones running firmware 0.1.00.0500 or earlier. These models are impacted by the defect in the Enhanced‑WiFi transmission subsystem.

Risk and Exploitability

The CVSS score of 7.5 classifies the vulnerability as high severity, and the EPSS score of less than 1% indicates a low likelihood of exploitation at the time of analysis. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote via the wireless interface, as implied by the description of a remote attacker triggering the flaw.

Generated by OpenCVE AI on April 18, 2026 at 10:03 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the drone firmware to the newest version released by DJI that resolves the denial‑of‑service issue.
  • If the Enhanced‑WiFi transmission subsystem is not required for your operations, disable it to eliminate the vulnerable code path.
  • Apply network segmentation or firewall rules to restrict third‑party connections to the drone’s Wi‑Fi interface, reducing exposure to potential remote exploitation.

Generated by OpenCVE AI on April 18, 2026 at 10:03 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
https://github.com/ByteMe1001/DJI-CatNect cve-icon cve-icon
History

Sat, 18 Apr 2026 10:30:00 +0000

Type Values Removed Values Added
Title Denial of Service via DJI Enhanced‑WiFi Transmission Subsystem

Thu, 05 Mar 2026 18:15:00 +0000

Type Values Removed Values Added
First Time appeared Dji mavic Mini Firmware
Dji mini Se Firmware
Dji spark Firmware
CPEs cpe:2.3:h:dji:mavic_mini:-:*:*:*:*:*:*:*
cpe:2.3:h:dji:mini_se:-:*:*:*:*:*:*:*
cpe:2.3:h:dji:spark:-:*:*:*:*:*:*:*
cpe:2.3:o:dji:mavic_mini_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dji:mini_se_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dji:spark_firmware:*:*:*:*:*:*:*:*
Vendors & Products Dji mavic Mini Firmware
Dji mini Se Firmware
Dji spark Firmware

Thu, 05 Mar 2026 09:15:00 +0000

Type Values Removed Values Added
First Time appeared Dji
Dji mavic Air
Dji mavic Mini
Dji mini
Dji mini Se
Dji spark
Vendors & Products Dji
Dji mavic Air
Dji mavic Mini
Dji mini
Dji mini Se
Dji spark

Wed, 04 Mar 2026 18:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 04 Mar 2026 16:00:00 +0000

Type Values Removed Values Added
Description An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi transmission subsystem
References

Subscriptions

Dji Mavic Air Mavic Mini Mavic Mini Firmware Mini Mini Se Mini Se Firmware Spark Spark Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-03-04T17:25:13.915Z

Reserved: 2026-02-16T00:00:00.000Z

Link: CVE-2026-26673

cve-icon Vulnrichment

Updated: 2026-03-04T17:24:38.729Z

cve-icon NVD

Status : Analyzed

Published: 2026-03-04T16:16:27.883

Modified: 2026-03-05T18:05:02.300

Link: CVE-2026-26673

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-18T10:15:25Z

Weaknesses