CVE-2026-26742 affects PX4 Autopilot versions 1.12.x through 1.15.x, stemming from a flaw in the "Re-arm Grace Period" logic that misapplies in-air emergency re-arm procedures to ground scenarios. This allows a pilot to bypass critical pre-flight safety checks, including the throttle threshold, if re-arming within 5 seconds of an automatic landing while in Manual mode. The vulnerability could lead to immediate, uncontrolled high-thrust takeoffs and loss of control. There is no public CVSS score, exploit intelligence, or community discussion available, and it is not listed on the KEV or Hot List, suggesting no active exploitation or readily available exploit code.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 1.12.0, < 1.16.0CPE matchmatch criteria | cpe:2.3:a:dronecode:px4_drone_autopilot:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.