All 5 CVE vulnerabilities found in Neo, with AI-generated Chinese analysis, references, and POCs.
Vendor: DJI
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-78321 | DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion CWE-770 | 6.0 | Medium | 2026-08-24 |
| CVE-2026-78306 | DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution CWE-306 | 8.5 | High | 2026-08-24 |
| CVE-2026-78255 | DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media CWE-306 | 8.7 | High | 2026-08-24 |
| CVE-2026-78251 | DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory CWE-798 | 9.3 | Critical | 2026-08-24 |
| CVE-2026-77812 | Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE CWE-311 | 9.4 | Critical | 2026-08-21 |
All 5 known CVE vulnerabilities affecting Neo with full Chinese analysis, references, and POCs where available.