{"vulnerability": "CVE-2026-78306", "sightings": [{"uuid": "290221a2-ee03-4675-949d-dea8514abaf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78306", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117149574958769389", "content": "We have just added an important vulnerability affecting DJI Air 3 and other products (CVE-2026-78306) https://vuldb.com/vuln/394605", "creation_timestamp": "2026-08-24T08:37:35.962229Z"}, {"uuid": "f2b384e8-5f3f-43b7-8a68-166f852b8f38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78306", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dk75udwzadmwe", "content": "CVE-2026-78306 - DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution\nCVE ID : CVE-2026-78306\n \n Published : Aug. 24, 2026, 8:08 a.m. | 26\u00a0minutes ago\n \n Description : DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an att...", "creation_timestamp": "2026-08-24T08:41:44.565313Z"}, {"uuid": "1c172ef7-e5c0-41c5-aea0-6360650f3b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78306", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtswgcwdda25", "content": "DJI drones accept commands over Bluetooth with no password (CVE-2026-78306, CVSS 8.5).\n\nA stranger in range can rewrite the Wi-Fi key, hijack the link, and cut control mid-flight.\n\n16 models affected, from Mini to Mavic. Update firmware before your next flight.", "creation_timestamp": "2026-08-24T08:51:51.322517Z"}]}