CVE-2026-52481

Received Received - Intake

Information Disclosure in SJRC F11 SJ-GPS-PRO Firmware

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: MITRE

Description

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcp_actions() function

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-18

Generated

2026-08-19

AI Q&A

2026-08-19

EPSS Evaluated

N/A

NVD

CVE-2026-52481

EUVD

EUVD-2026-61280

Affected Vendors & Products

Vendor	Product	Version / Range
sjrc	sj-gps-pro	*
linux	linux_kernel	3.0.8
busybox	busybox	1.19.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

CVE-2026-52481 is a critical vulnerability in the SJRC F11 drone firmware that allows remote code execution via TCP port 8888. Sending a packet starting with 'da' followed by 29 bytes triggers direct execution of those bytes as root without authentication.

Detection Guidance

To detect this vulnerability, scan your network for open TCP port 8888 on devices running SJRC F11 firmware. Use commands like 'nmap -p 8888 <target_IP>' to check for the open port. If the port is open, test if it responds to a TCP packet starting with 'da' followed by 29 bytes. A vulnerable system will execute the payload.

Impact Analysis

An attacker could exploit this to gain full control of the drone, execute arbitrary commands as root, or potentially take over the device remotely. This could lead to loss of control, data theft, or misuse of the drone's capabilities.

Mitigation Strategies

Immediately block TCP port 8888 on your firewall or network perimeter to prevent external access. Update the drone's firmware to a patched version if available. Isolate the drone from critical networks until a fix is applied. Monitor network traffic for unusual activity on port 8888.

Hi! I’m here to help you understand CVE-2026-52481. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70