Priority MEDIUM 62
PX4 is an open-source autopilot stack for drones and unmanned vehicles.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00363 · Published 2026-03-18 · No fix listed CWE-121
Priority MEDIUM 57
PX4 autopilot is a flight control solution for drones.
CVSS 3.1MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00249 · Published 2026-03-13 · Fixed in 1.17.0-rc1 CWE-416
Priority MEDIUM 62
PX4 autopilot is a flight control solution for drones.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00385 · Published 2026-03-13 · Fixed in 1.17.0-rc2 CWE-670
Priority MEDIUM 63
PX4 autopilot is a flight control solution for drones.
CVSS 3.1MEDIUM 6.8· Adjacent network · No auth · No interaction · EPSS 0.00474 · Published 2026-03-13 · Fixed in 1.17.0-rc2 CWE-22
Priority HIGH 70
PX4 autopilot is a flight control solution for drones.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00239 · Published 2026-03-13 · Fixed in 1.17.0-rc2 CWE-121
Priority MEDIUM 60
PX4 autopilot is a flight control solution for drones.
CVSS 3.1MEDIUM 6.1· Physical · No auth · No interaction · EPSS 0.00281 · Published 2026-03-13 · Fixed in 1.17.0-rc2 CWE-121
Priority HIGH 68
PX4 autopilot is a flight control solution for drones.
CVSS 3.1HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.00307 · Published 2026-03-13 · Fixed in 1.17.0-rc2 CWE-120
Priority HIGH 65
PX4 autopilot is a flight control solution for drones.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00284 · Published 2026-03-13 · Fixed in 1.17.0-rc2 CWE-121
Priority HIGH 68
PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re-arm Grace Period" logic.
CVSS 3.1HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.00294 · Published 2026-03-10 · No fix listed CWE-862
Priority HIGH 68
PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism.
CVSS 3.1HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.00287 · Published 2026-03-10 · No fix listed CWE-862
Priority MEDIUM 55
A vulnerability was found in PX4 PX4-Autopilot up to 1.16.0.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00248 · Published 2025-12-28 · No fix listed CWE-119
Priority HIGH 68
Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute
CVSS 3.1HIGH 7.9· Local · Low privileges · User interaction · EPSS 0.00349 · Published 2025-01-07 · No fix listed CWE-120
Priority MEDIUM 40
PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name parameter at /logger/logged_topics.cpp.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00704 · Published 2024-06-25 · No fix listed CWE-120
Priority LOW 29
A buffer overflow in PX4-Autopilot v1.12.3 allows attackers to cause a Denial of Service (DoS) via a crafted MavLink message.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.0053 · Published 2024-06-25 · No fix listed CWE-120
Priority LOW 27
PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching the geofence using flaws in the function.
CVSS 3.1MEDIUM 5.6· Local · High privileges · User interaction · EPSS 0.0021 · Published 2024-04-23 · No fix listed CWE-229
Priority LOW 20
An issue in PX4 Autopilot v1.14 and before allows a remote attacker to execute arbitrary code and cause a denial of service via the Breach Return Point function.
CVSS 3.1MEDIUM 4.4· Local · Low privileges · User interaction · EPSS 0.00256 · Published 2024-04-22 · No fix listed CWE-120
Priority MEDIUM 62
An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone via the home point location of the mission_block.cpp component.
CVSS 3.1MEDIUM 6.6· Local · Low privileges · User interaction · EPSS 0.00242 · Published 2024-04-10 · No fix listed CWE-229
Priority MEDIUM 53
A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions.
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.00335 · Published 2024-02-06 · No fix listed CWE-362
Priority LOW 20
PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and mission_feasibility_checker.cpp.
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.0036 · Published 2024-02-06 · No fix listed CWE-362
Priority MEDIUM 53
PX4 autopilot is a flight control solution for drones.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00515 · Published 2023-11-13 · Fixed in 1.14.0 CWE-120
Priority HIGH 75
PX4-Autopilot provides PX4 flight control solution for drones.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00742 · Published 2023-10-31 · No fix listed CWE-120
Priority HIGH 72
Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00815 · Published 2023-07-06 · No fix listed CWE-120
Priority HIGH 72
An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0096 · Published 2023-03-09 · No fix listed CWE-200