CVE-2026-52481

The SJRC F11 SJ-GPS-PRO drone, running firmware build 2019-09-17 , contains a critical hardcoded RCE backdoor (CVE-2026-52481). An unauthenticated remote attacker can execute arbitrary commands as root by sending a specially crafted TCP packet to port 8888 . The vulnerability exists in the tcp_ac...

SJ-GPS-PRO-F11-Vulnerability

Independent vulnerability research on the SJRC F11 series consum...