Is CVE-2026-52482 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-52482 being exploited in the wild.

How severe is CVE-2026-52482?

High severity, with a CVSS score of 7.5, published 9 September 2026.

Which products and versions are affected?

SJRC F11 SJ-GPS-PRO firmware build 2019-09-17.

Is there a fix for CVE-2026-52482?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-52482 attacked?

It is attacked from the adjacent network, in a network appliance.

Am I affected by CVE-2026-52482?

Check whether you run SJRC F11 SJ-GPS-PRO at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-52482: SJRC F11 SJ-GPS-PRO unauthenticated telnet root shell

CVE-2026-52482 · Severity: high · CVSS 7.5 · Published 2026-09-09

The SJRC F11 SJ-GPS-PRO consumer drone's telnet service (port 23) spawns an unauthenticated root shell, allowing anyone connected to the drone's WiFi network to gain complete administrative access. An attacker can remotely execute arbitrary commands with root privileges, read/modify sensitive flight data and configurations, or disable the device entirely.

Technologies: SJRC F11 SJ-GPS-PRO. Vendors: SJRC.

Quick answers

Is CVE-2026-52482 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-52482 being exploited in the wild.
How severe is CVE-2026-52482?: High severity, with a CVSS score of 7.5, published 9 September 2026.
Which products and versions are affected?: SJRC F11 SJ-GPS-PRO firmware build 2019-09-17.
Is there a fix for CVE-2026-52482?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-52482 attacked?: It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2026-52482?: Check whether you run SJRC F11 SJ-GPS-PRO at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a missing authentication mechanism in the inetd service, which spawns /app/sh_for_telnet directly as root on TCP port 23. This binary is a wrapper that invokes system("/bin/sh -l") without any credential validation. The attack requires only network adjacency—connection to the drone's open WiFi access point—with no further authentication or user interaction needed. An unauthenticated attacker can establish a telnet connection and immediately obtain a root shell, enabling remote code execution, data theft, and device manipulation. No patch is known to exist as of the disclosure date (August 2026).

Affected products

SJRC F11 SJ-GPS-PRO firmware build 2019-09-17

Timeline

2026-08-15: disclosed: Public disclosure via GitHub
2026-08-16: advisory: GitHub security advisory GHSA-wph3-9w93-pxxq published
2026-05-17: other: Vendor SJRC notified; no response received

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.