CVE-2026-26741

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-26741
PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism. When switching from Auto mode to Manual mode while the drone is in the "ARMED" state (after landing and before the automatic disarm triggered by the COM_DISARM_LAND parameter), the system lacks a throttle threshold safety check for the physical throttle stick. This flaw can directly cause the drone to lose control, experience rapid uncontrolled ascent (flyaway), and result in property damage

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/npuwyw/PX4-Autopilot/blob/audit-v1.12.3-mode-transition-logic-flaw/PX4_Autopilot_Mode_Switching_Logic_Vulnerability.md Exploit Vendor Advisory Mitigation
Configurations

Configuration 1 (hide)

cpe:2.3:a:dronecode:px4_drone_autopilot:*:*:*:*:*:*:*:*
History

12 Mar 2026, 17:05

Type Values Removed Values Added
References () https://github.com/npuwyw/PX4-Autopilot/blob/audit-v1.12.3-mode-transition-logic-flaw/PX4_Autopilot_Mode_Switching_Logic_Vulnerability.md - () https://github.com/npuwyw/PX4-Autopilot/blob/audit-v1.12.3-mode-transition-logic-flaw/PX4_Autopilot_Mode_Switching_Logic_Vulnerability.md - Exploit, Vendor Advisory, Mitigation
CPE cpe:2.3:a:dronecode:px4_drone_autopilot:*:*:*:*:*:*:*:*
First Time Dronecode
Dronecode px4 Drone Autopilot

11 Mar 2026, 15:16

Type Values Removed Values Added
CWE CWE-862
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.1

11 Mar 2026, 13:53

Type Values Removed Values Added
Summary
  • (es) Las versiones del piloto automático PX4 de la 1.12.x a la 1.15.x contienen un fallo lógico en el mecanismo de cambio de modo. Al cambiar del modo automático al modo manual mientras el dron está en estado 'ARMADO' (después del aterrizaje y antes del desarmado automático activado por el parámetro COM_DISARM_LAND), el sistema carece de una comprobación de seguridad del umbral del acelerador para la palanca física del acelerador. Este fallo puede causar directamente que el dron pierda el control, experimente un ascenso rápido e incontrolado (flyaway) y provoque daños a la propiedad.

10 Mar 2026, 19:17

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-10 19:17

Updated : 2026-03-12 17:05

NVD link : CVE-2026-26741

Mitre link : CVE-2026-26741

CVE.ORG link : CVE-2026-26741

JSON object : View

Products Affected

dronecode

  • px4_drone_autopilot
CWE
CWE-862

Missing Authorization