Approved changes feed: RSS · Atom
cpe:2.3:a:px4:autopilot:1.16.0:*:*:*:*:*:*:*
part: a version: 1.16.0 update: *
| Vendor | Px4 (07e5ecc5-1bd8-5783-9463-a6ceaed98ead) |
|---|---|
| Product | Autopilot (de8596e0-e9ea-5a00-aa46-bf03c28a9413) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/px4/px4-autopilot |
purl2cpe | 2026-06-01 10:17:17.074300 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1579 |
vulnerable | 2026-06-08 07:49:08.932061 |
PX4 Autopilot Missing authentication for critical function
CRITICAL (9.8)
The MAVLink communication protocol does not require cryptographic
authentication by default. When MAVLink 2.0 message signing is not
enabled, any message -- including SERIAL_CONTROL, which provides
interactive shell access -- can be sent by an unauthenticated party with
access to the MAVLink interface. PX4 provides MAVLink 2.0 message
signing as the cryptographic authentication mechanism for all MAVLink
communication. When signing is enabled, unsigned messages are rejected
at the protocol level.
Published: 2026-03-31T20:20:06.506Z
Updated: 2026-03-31T20:36:09.044Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.