Ardupilot Arduplane — known CVE vulnerabilities

Every CVE whose affected-product data names Ardupilot Arduplane, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-38971 — CVSS 9.1 (critical): ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCS_MAVLink/GCS_serial_control.cpp in…