S2 · 02/11
2026 ·
DJI · Multiple countries
| Company | DJI |
| Category | drones evtol |
| Type | cyber |
| Date | 02/11 2026 |
| Time of day | not documented |
| Location | Multiple countries |
| Severity | S2 (minor injury or single-unit damage) |
| Scale | ~7,000 devices across 24 countries |
| Confidence | medium |
| Verification | Yes - adversarially checked against the cited source |
| Source | Popular Science |
A software engineer reverse-engineering his own DJI robot vacuum discovered that cloud credentials also granted access to camera feeds, microphone audio, home maps, and status data for roughly 7,000 other DJI robot vacuums across 24 countries.
| Sev | Date | Company | Event |
|---|---|---|---|
| S3 | 2026-03-07 | DJI | DJI Pays $30K Bug Bounty After Researcher Hacks 7,000 Robot Vacuums |
| S2 | 2018-03 | DJI | Check Point Research discloses DJI account/data vulnerability |