CVE-2026-86713: PX4 PX4-Autopilot

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path where exit_and_cleanup() deletes the LoadMon object and frees the performance counter before perf_end() attempts to access it. Attackers can trigger this vulnerability by issuing the load_mon stop command from any PXH or MAVLink shell, causing reads and writes through freed memory that corrupt heap objects and destabilize the flight stack.

Affected products

• PX4 PX4-Autopilot: up to and including 1.17.0

Published 2026-09-08. Last modified 2026-09-08.