VYPR

CrystalSky ZS600C

by Dji

CVEs (1)

  • CVE-2026-114355HigOct 23, 2026
    risk 0.56cvss —epss —

    OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local unprivileged process to execute arbitrary commands as root by writing a crafted line to the Android log (logcat), which the…