tag
Drone
Critical
Unauthenticated NaN Injection via MAVLink PARAM_SET in ArduPilot ArduPlane (CVE-2026-36522)
CVE-2026-36522·
ArduPilot ArduPlane
unpatched
High
PX4-Autopilot tattu_can Driver — CAN Bus Stack Buffer Overflow DoS (CVE-2026-32707)
CVE-2026-32707 (GHSA-wxwm-xmx9-hr32, CWE-121)·
PX4-Autopilot flight controller firmware, tattu_can driver
patched
Medium
PX4 Autopilot MAVLink FTP Stack Buffer Overflow (CVE-2026-32743)
CVE-2026-32743·
PX4 Autopilot flight controller firmware
unpatched