CVE EVIDENCE REVIEW
ReviewCriticalEvidence review

CVE-2026-77812 evidence review

DJI Neo, Neo 2, DJI Flip

DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone over BLE, including the Wi-Fi credentials. An attacker within BLE range can passively sniff this traffic and recover the credentials in cleartext, including the drone's Wi-Fi PSK, SSID, and trusted identifier UUID. Obtaining these credentials allows the attacker to join the drone's internal Wi-...

Open CVE record
Evidence review

This record remains available for product and version identification, but it is not presented as a complete remediation procedure. Confirm the affected range and the supported fix in a direct vendor advisory before changing production systems.

ProductDJI Neo, Neo 2, DJI Flip
Affected versions<= 01.00.0400, <= 01.00.0500, <= 01.00.1200, <= 01.00.1600, <= 01.00.1400, <= 01.00.0300, <= 01.00.0800, <= 01.01.0700, <= 01.07.0200, <= 01.00.0900, <= 01.00.1100, <= 01.00.0600
Fixed versionsNo verified fixed-version field is available yet
Priority basisReview · CVSS 9.4 · EPSS -
01

Identify the product and installed version

Record whether DJI Neo, Neo 2, DJI Flip is present, where it is installed, and which interfaces are exposed.

  • Record the product name, package or appliance identifier, and installed version.
  • Identify internet-facing, administrative, API, and internal access paths.
  • Preserve the pre-change configuration and relevant service logs.
02

Compare the affected range

Use the current record as an identification aid: <= 01.00.0400, <= 01.00.0500, <= 01.00.1200, <= 01.00.1600, <= 01.00.1400, <= 01.00.0300, <= 01.00.0800, <= 01.01.0700, <= 01.07.0200, <= 01.00.0900, <= 01.00.1100, <= 01.00.0600. Resolve incomplete inventory results before deciding that an asset is unaffected.

03

Verify the authoritative remediation source

Open the linked source material and locate a direct vendor advisory for this CVE. Confirm the supported fixed release and product-specific update path before making a production change.

Operational boundary

This page does not replace the vendor advisory, support contract, change-management process, or recovery plan. Do not infer that an asset is unaffected from an incomplete inventory query or a missing fixed-version field.