Dji Mini SE Firmware vulnerabilities

2 CVEs affecting Dji Mini SE Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-26673, published 2026-03-04.

More from Dji.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-29945, published 2022-04-29. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol.
• CVE-2026-26673, published 2026-03-04. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi transmission subsystem