CVE-2026-128909

The DJI AeroScope Mobile (TP703) is vulnerable to a CWE-347 flaw in the firmware update handler of the uavmonitor_usbv1 management service on the 1300 communications board . The root cause is that the device accepts any image matching a supplied MD5 checksum without verifying a cryptographic sign...

EUVD-2026-125352

Improper verification of cryptographic signature CWE-347 in the firmware update handler of the management service uavmonitorusbv1 of the 1300 communications board in DJI AeroScope Mobile TP703 firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows an...

CVE-2026-128908

An OS command injection (CWE-78) vulnerability exists in the uavmonitor_usbv1 management service of the 1300 communications board within DJI AeroScope Mobile (TP703) . The flaw occurs because configuration values written without authentication over the management interface are inserted unquoted i...

EUVD-2026-125350

OS command injection CWE-78 in the network-configuration handling of the management service uavmonitorusbv1 of the 1300 communications board in DJI AeroScope Mobile TP703 firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows an unauthenticated...

EUVD-2026-125348

Missing authentication for a critical function CWE-306 in the management service uavmonitorusbv1 of the 1300 communications board in DJI AeroScope Mobile TP703 firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows an unauthenticated attacker on the...

CVE-2026-128907

The DJI AeroScope Mobile (TP703) is vulnerable to missing authentication in the uavmonitor_usbv1 management service of its 1300 communications board. Affected firmware versions include 03.00.00.26 (TP703) and 02.00.07.12 through 02.00.08.40 (1300 communications board). An unauthenticated attacker...