CVE-2025-10250

A weakness has been identified in DJI Mavic Spark, Mavic Air and Mavic Mini 01.00.0500. Affected is an unknown function of the component Telemetry Channel. Executing manipulation can lead to use of hard-coded cryptographic key . The attacker needs to be present on the local network. A high complexity level is associated with this attack. The exploitability is told to be difficult. The exploit has been made available to the public and could be exploited. This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-320
• CWE-321

• https://github.com/ByteMe1001/DJI-Enhanced-WiFi-Weak-Cryptography
• https://vuldb.com/?ctiid.323609
• https://vuldb.com/?id.323609
• https://vuldb.com/?submit.639757

Published

Sep 11, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10244A maliciously crafted HTML payload, when rendered by the Aut…8.7
• CVE-2025-10245A security flaw has been discovered in Display Painéis TGA u…4.3
• CVE-2025-10246A weakness has been identified in lokibhardwaj PHP-Code-For-…3.5
• CVE-2025-10247A security vulnerability has been detected in JEPaaS 7.2.8. …6.3
• CVE-2025-10249The Slider Revolution plugin for WordPress is vulnerable to …6.5
• CVE-2025-1025Versions of the package cockpit-hq/cockpit before 2.4.1 are …7.7
• CVE-2025-10251A vulnerability was detected in FoxCMS up to 1.24. Affected …9.8
• CVE-2025-10252A flaw has been found in SEAT Queue Ticket Kiosk up to 20250…3.1
• CVE-2025-10253A vulnerability has been found in openDCIM 23.04. This vulne…3.5
• CVE-2025-10254A vulnerability was found in Ascensio System SIA OnlyOffice …3.5
• CVE-2025-10255A vulnerability was determined in Ascensio System SIA OnlyOf…3.5
• CVE-2025-10256A NULL pointer dereference vulnerability exists in FFmpeg’s …5.5