CVE-2026-77812

CVE-2026-77812 — DJI 无人机通过 BLE 明文传输 Wi-Fi PSK 和会话 UUID POC CVE 记录： https://vulners.com/cve/CVE-2026-77812 NVD： https://nvd.nist.gov/vuln/detail/CVE-2026-77812 描述 DJI 无人机通过蓝牙暴露了一个 DUML 控制通道。该通道上的每条消息——双向传输，即在 DJI Fly 应用和无人机之间——均以明文发送。未应用 BLE 链路层加密，也未应用应用层加密。 处于无线电范围内的被动攻击者可以读取每条命令和响应的完整内容，包括：...

Exploit for CVE-2026-77812

CVE-2026-77812 — DJI Cleartext BLE Transmission of Wi-Fi PSK a...

User Impersonation

keycloak-services is vulnerable to User Impersonation. The vulnerability is due to the OpenID Connect user authentication because the session UUID is not properly bound to the user session, allowing an attacker to obtain a certain piece of information from a user request in the same realm and...