https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:06:02.649265+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-278380 EUVD-2026-278380 2026-10-03T20:06:02.652225+00:00 EUVD-2026-278380 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1579 fkie_cve-2026-1579 2026-10-03T20:06:02.652260+00:00

The MAVLink communication protocol does not require cryptographic authentication by default. When MAVLink 2.0 message signing is not enabled, any message -- including SERIAL_CONTROL, which provides interactive shell access -- can be sent by an unauthenticated party with access to the MAVLink interface. PX4 provides MAVLink 2.0 message signing as the cryptographic authentication mechanism for all MAVLink communication. When signing is enabled, unsigned messages are rejected at the protocol level.

 https://cve.radiocsirt.org/vuln/ghsa-vcq6-mmfw-5xm3 GHSA-vcq6-mmfw-5xm3 2026-10-03T20:06:02.652295+00:00

The MAVLink communication protocol does not require cryptographic authentication by default. When MAVLink 2.0 message signing is not enabled, any message -- including SERIAL_CONTROL, which provides interactive shell access -- can be sent by an unauthenticated party with access to the MAVLink interface. PX4 provides MAVLink 2.0 message signing as the cryptographic authentication mechanism for all MAVLink communication. When signing is enabled, unsigned messages are rejected at the protocol level.

 https://cve.radiocsirt.org/vuln/icsa-26-090-02 ICSA-26-090-02 — PX4 Autopilot 2026-10-03T20:06:02.652334+00:00

The MAVLink communication protocol does not require cryptographic authentication by default. When MAVLink 2.0 message signing is not enabled, any message -- including SERIAL_CONTROL, which provides interactive shell access -- can be sent by an unauthenticated party with access to the MAVLink interface. PX4 provides MAVLink 2.0 message signing as the cryptographic authentication mechanism for all MAVLink communication. When signing is enabled, unsigned messages are rejected at the protocol level.