01 Record

CVE-2026-77812

Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE

CriticalPUBLISHEDCNA: CIRCL

Base score9.4 CVSS v4.0CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

View raw JSON CVE Program record

02 Description

Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE

03 Metadata

Published

2026-08-21 14:06Z11 HR AGO

Last updated

2026-08-21 17:42Z7 HR AGO

Reserved

2026-08-21

Assigning CNA

CIRCL

Record state

PUBLISHED

Severity

Critical (CVSS 9.4)

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Weaknesses

CWE-311Missing Encryption of Sensitive DataClass

SSVC decision

ExploitationnoneAutomatablenoTechnical Impacttotal

Data version

5.2

Document digest

bb744e390c2cd34ab071a8dc2b4d8e00574ce12f5e66c8a2c904b336f364ede3

04 Affected products

VendorProductVersionsPlatforms

DJIDJI Neo0 to 01.00.0400—

DJIDJI Neo 20 to 01.00.0500—

DJIDJI Flip0 to 01.00.1200—

DJIDJI Air 30 to 01.00.1600—

DJIDJI Air 3S0 to 01.00.1400—

DJIDJI Avata 20 to 01.00.0400—

DJIDJI Avata 3600 to 01.00.0300—

DJIDJI Mavic 30 to 01.00.1400—

DJIDJI Mavic 3 Classic0 to 01.00.0800—

DJIDJI Mavic 3 Pro0 to 01.01.0700—

DJIDJI Mavic 4 Pro0 to 01.00.0500—

DJIDJI Mini 20 to 01.07.0200—

DJIDJI Mini 30 to 01.00.0500—

DJIDJI Mini 3 Pro0 to 01.00.0900—

DJIDJI Mini 4 Pro0 to 01.00.1100—

DJIDJI Mini 5 Pro0 to 01.00.0600—

05 References

support.dji.comhttps://support.dji.com/help/content?customId=en-us03400011149&spaceId=34&re=US&lang=entechnical-description