CVE-2026-26741: PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism

Routine

HIGH 8.1UPGRADE

CVE-2026-26741 is a high-severity flaw (CVSS 8.1) affecting px4 drone autopilot. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism. When switching from Auto mode to Manual mode while the drone is in the "ARMED" state (after landing and before the automatic disarm triggered by the COM_DISARM_LAND parameter), the system lacks a throttle threshold safety check for the physical throttle stick. This flaw can directly cause the drone to lose control, experience rapid uncontrolled asce

Why this priority

High severity
Public exploit reference

A fixed release or distro patch exists.

Risk facts

CVSS score	8.1 (High)
Attack vector	Adjacent network
Attack complexity	Low
Privileges needed	None
User interaction	None
EPSS exploit chance	0.3% (top 83%)
CISA exploited list	No
Weakness	CWE-862
Published	2026-03-10
Last modified	2026-06-17

Publisher (CNA): MITRE · Vendor: dronecode

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2026-03-10 19:17 UTCPublished CVE record published
2026-06-17 10:26 UTCUpdated Record last modified

dronecode px4 drone autopilot UPGRADE

Affected: >= 1.12.0 and < 1.16.0

Fixed in: 1.16.0

Safe to downgrade to: a release before 1.12.0

1. Check installed version

apt-cache policy px4-drone-autopilot || rpm -q px4-drone-autopilot || px4-drone-autopilot --version

2. UPGRADE to 1.16.0 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade px4-drone-autopilot

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade px4-drone-autopilot

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 1.12.0 (Debian / Ubuntu)

apt-cache madison px4-drone-autopilot sudo apt install px4-drone-autopilot=<VERSION_BEFORE_1.12.0> sudo apt-mark hold px4-drone-autopilot

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list px4-drone-autopilot sudo dnf downgrade px4-drone-autopilot-<VERSION_BEFORE_1.12.0> sudo dnf versionlock add px4-drone-autopilot

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-26741?

px4 drone autopilot: upgrade to 1.16.0. Exact commands for each OS are on this page.

Is CVE-2026-26741 being exploited?

CVE-2026-26741 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-26741 affect?

CVE-2026-26741 affects px4 drone autopilot. Severity is high (CVSS 8.1). PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism. When switching from Auto mode to Manual mode while the drone is in the "ARMED" state (after landing and before the automatic disarm triggered

How urgent is CVE-2026-26741?

Priority 38/100. High severity; Public exploit reference

Related CVEs

CVE-2025-15150 MEDIUM 5.3 UPGRADE A vulnerability was found in PX4 PX4-Autopilot up to 1.16.0
CVE-2026-32743 MEDIUM 6.5 UPGRADE PX4 is an open-source autopilot stack for drones and unmanned vehicles
CVE-2026-32724 MEDIUM 5.3 UPGRADE PX4 autopilot is a flight control solution for drones
CVE-2026-32713 MEDIUM 4.3 UPGRADE PX4 autopilot is a flight control solution for drones
CVE-2026-32709 MEDIUM 5.4 UPGRADE PX4 autopilot is a flight control solution for drones

References

← Back to latest CVEs