← All credits

Llorenç Romá Alvarez, Security Researcher, Cyber Defence Campus, Switzerland

5 vulnerability records and advisories credit this contributor.

CVE-2026-114353

DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution

CVE-2026-114354

DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root

CVE-2026-114355

DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root

CVE-2026-114356

DJI CrystalSky ZS600C DJIUpdateService binder exposes privileged operations without authorization

CVE-2026-114357

DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0)