PX4 vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20232
3. 20252
4. 202616

Newest CVEs

• CVE-2026-102809

  PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command

  PX4 · PX4-Autopilot

  High7.1
• CVE-2026-102808

  PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress

  PX4 · PX4-Autopilot

  High7.1
• CVE-2026-86714

  PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman

  PX4 · PX4-Autopilot

  Medium5.3
• CVE-2026-86713

  PX4 Autopilot through 1.17.0 Use-After-Free in load_mon

  PX4 · PX4-Autopilot

  High7.1
• CVE-2026-86097

  PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select

  PX4 · PX4-Autopilot

  High7.1
• CVE-2026-86096

  PX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task Startup

  PX4 · PX4-Autopilot

  Medium6.0
• CVE-2026-84698

  PX4 Autopilot sd_bench Heap Buffer Overflow via Block Size

  PX4 · PX4-Autopilot

  High7.1
• CVE-2026-1579

  PX4 Autopilot Missing authentication for critical function

  PX4 · Autopilot

  Critical9.3
• CVE-2026-32743

  PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling

  PX4 · PX4-Autopilot

  Medium6.5
• CVE-2026-32724

  PX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race Condition

  PX4 · PX4-Autopilot

  Medium5.3