ArduPilot

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

ArduPilot records in CISA KEV

No ArduPilot vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Apweb 1 record HIGH Arduplane 1 record HIGH

Records

2 records

TI-2022-11353 CVE-2022-28711 · GHSA-g969-j9qm-fx8r

Improper input validation in ArduPilot APWeb

HIGH 81

A memory corruption vulnerability exists in the cgi.c unescape functionality of ArduPilot APWeb master branch 50b6b7ac - master branch 46177cb9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01711 Published 2022-04-14 No fix listed CWE-20

TI-2026-28237 CVE-2026-38971 · GHSA-8g74-gp28-fgqv

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in…

HIGH 78

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCS_MAVLink/GCS_serial_control.cpp in GCS_MAVLINK::handle_serial_control().

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0068 Published 2026-07-02 No fix listed CWE-125

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0