Known Vulnerabilities for DJI Flip by DJI
Listed below are 10 of the newest known vulnerabilities associated with "DJI Flip" by "DJI".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-97997 json | In the Linux kernel, the following vulnerability has been resolved: virtio_ring: fix stale descriptor flags after a failed p... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-93145 json | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gdsc: tear down per-domain genpds in gdsc_unr... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-90648 json | wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, a... | Not Provided | 2026-09-13 | 2026-09-14 |
| CVE-2026-89520 json | In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight sel... | Not Provided | 2026-09-11 | 2026-09-13 |
| CVE-2026-78321 json | The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker ... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-78306 json | DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to ... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-78255 json | The HTTP media server running on DJI drones serves stored photos and videos through the `/v2` endpoint without authenticating... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-78251 json | DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated use... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-77812 json | DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption... | Not Provided | 2026-08-21 | 2026-08-24 |
| CVE-2026-61591 json | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to versi... | Not Provided | 2026-09-16 | 2026-09-17 |