FCC Extends Firmware Waiver for Existing Foreign Drones
Heads up, pilots: the FCC just extended the firmware waiver for foreign-made drones and critical components until at least January 1, 2029. This is massive for everyone running DJI, Autel, or similar gear that was authorized before the December 2025 ban. The FCC’s Office of Engineering and Technology (OET) dropped Public Notice DA 26-454 on May 8, 2026, pushing back the previous January 1, 2027 deadline for drones and March 1, 2027 for consumer routers. This extension means our older, existing quads and related components will continue to receive crucial security patches and bug fixes, preventing millions of deployed units from becoming cybersecurity liabilities due to unsupported software.
Crucially, the waiver isn’t just a simple extension; it also broadens the scope of permitted updates. We’re now talking about Class II permissive changes, which cover more substantial software and firmware modifications designed to ‘mitigate consumer harm,’ not just the Class I security patches and minor bug fixes. This is the FCC implicitly admitting what many of us already knew: cutting off updates to the massive installed base of foreign-made drones and routers would create a far worse cybersecurity problem than the one the Covered List was originally meant to address. It’s a pragmatic concession to the reality of millions of devices already in service.
Covered List Remains, but the Logic Contradiction is Clear
Before anyone gets too excited, understand that this waiver does not mean the FCC is rolling back the broader ban on new foreign drone equipment. The Covered List, which blocks new equipment authorizations for gear manufactured outside the United States, is still firmly in place. This extension only applies to devices that received FCC authorization *before* they were placed on the Covered List – specifically, December 22, 2025, for drones and March 23, 2026, for routers. A drone authorized on December 21, 2025, is covered, but one authorized on December 23, 2025, was never eligible. So, while our existing fleet gets a lifeline for critical updates, don’t expect new DJI or Autel models to clear customs for retail anytime soon.
The real takeaway here is the logical contradiction the FCC just conceded. The agency initially deemed these foreign-made drones and routers an ‘unacceptable risk to national security,’ justifying the ban on new units. Yet, with this waiver, they’re now stating that these *same products*, in *our homes and businesses*, need to keep receiving updates from those *same manufacturers* because cutting them off would make the devices less safe. You can’t have it both ways. The OET, in DA 26-454, is essentially prioritizing the ‘continued safe operation of existing models,’ which means they acknowledge that the patch pipeline for brands like DJI is part of consumer protection in the United States.
What This Means for Pilots and the Road Ahead
This isn’t just a temporary fix; there’s a signal for a more permanent solution. The most consequential line in DA 26-454 is the OET’s recommendation to the full Commission that it ‘consider codifying this waiver.’ If that moves forward and gets written into formal regulations, it’s a huge win for long-term stability. A codified rule is far more durable than a discretionary administrative decision; it would require a full notice-and-comment rulemaking process to undo. This shift from temporary waivers to potential codification suggests the agency is grappling with the engineering reality of millions of deployed devices and looking for a more stable path forward than simply kicking the can down the road every couple of years.
For us, the FPV community, this waiver means our existing gear isn’t going to suddenly become unsupported, vulnerable bricks. It’s a pragmatic victory for the installed base. The political ‘front end’ of the policy – closing the market to new foreign drones due to national security concerns – remains unchanged. However, the ‘back end’ – the undeniable engineering reality that our quads need ongoing security and functional updates – continues to influence the agency’s actions. Keep an eye on that OET recommendation for codification. If it leads to a formal Notice of Proposed Rulemaking, that patch pipeline for our grandfathered hardware becomes significantly more secure, pushing back against the regulatory cliff of January 1, 2029.
Quick Facts
- •💡 The FCC’s Office of Engineering and Technology (OET) extended the firmware waiver for previously authorized foreign-made drones and routers until January 1, 2029, via Public Notice DA 26-454 on May 8, 2026.
- •💡 The waiver now covers Class II permissive changes, allowing for substantive software and firmware modifications to mitigate consumer harm, in addition to Class I changes like security patches and bug fixes.
- •💡 Existing DJI and Autel drones, along with other foreign-made UAS components, authorized before December 22, 2025, can continue to receive critical software and firmware updates.
- •💡 The FCC conceded that cutting off updates to millions of already-deployed foreign devices would create a worse cybersecurity problem than the national security risks the original ban aimed to address.
- •💡 The OET is recommending that the full Commission consider codifying this waiver into permanent regulation, which would provide a more stable and durable update pipeline for grandfathered hardware.