773 PoCs | 119 CISA KEV

tag

Drone

Unauthenticated NaN Injection via MAVLink PARAM_SET in ArduPilot ArduPlane (CVE-2026-36522)

CVE-2026-36522 network Unverified

CVE-2026-36522networkCRITICAL 9.1Unverified2026-07-05PX4-Autopilot tattu_can Driver — CAN Bus Stack Buffer Overflow DoS (CVE-2026-32707)

CVE-2026-32707 (GHSA-wxwm-xmx9-hr32, CWE-121) hardware Patched

CVE-2026-32707hardwareHIGH 7.5Patched2026-07-05PX4 Autopilot MAVLink FTP Stack Buffer Overflow (CVE-2026-32743)

CVE-2026-32743 hardware Patched

CVE-2026-32743hardwareMEDIUM 6.5Patched2026-07-05