CVE-2026-114355 Details
Description
OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local unprivileged process to execute arbitrary commands as root by writing a crafted line to the Android log (logcat), which the helper reads and passes to a shell eval.
A command injection vulnerability has been identified in the root-privileged 'hardware_monitor' helper of the DJI CrystalSky ZS600C. This vulnerability exists in firmware versions 0.3.9.7 through 0.6.6.9 on Android. It allows a local unprivileged process to execute arbitrary commands as root by writing a crafted line to the Android log (logcat). The 'hardware_monitor' helper reads these lines and passes them to a shell eval, executing the injected commands with root privileges.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 23, 2026CISA-ADP
Assessed Oct 28, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://cyber-defence-campus.github.io/projects/vulnerabilities/CVE-2026-114355 | [email protected] | AdvisoryTechnical Description |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| DJI CrystalSky ZS600C | >= 0.3.9.7, <= 0.6.6.9 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 28, 2026 | CVE Modified | CISA-ADP |
| Oct 23, 2026 | New CVE Received | [email protected] |