Illustrative: a United States Air Force explosive ordnance disposal technician operates the control system for the Man Transportable Robotic System Increment II during an exercise at Limestone Hills Training Area, Montana, 18 August 2026. Not a German response and not the Leipzig-Halle incident; shown because remote means are the doctrinal default this article describes. Photo by Tech. Sgt. Aaron Thomasson, U.S. Air Force, via DVIDS (public domain). Use does not imply endorsement.

Hexogen at Leipzig-Halle: A Third Explosive-Laden UAS and the Disposal Problem Europe’s Airlift Hubs Now Own

German investigators recovered a third uncrewed aircraft system in a field at Kabelsketal, west of Leipzig-Halle Airport, on 14 August 2026, and the following day recovered at the same site a substance initially assessed as roughly 50 grams of hexogen, the German name for the military nitramine RDX. Whether that material was a fitted payload, a separate cache or residue is not established on the record. It followed the device of 4 to 5 August, which struck an Antonov Airlines An-124 in the wing near the integral fuel tanks, failed to function, and fell to the ground, where a federal police disposal team removed the detonator before the remaining charge was destroyed in a controlled demolition.

Technical Summary

The devices reported so far share a common construction logic. Each is a small rotary-wing uncrewed aircraft system (UAS) adapted as a delivery body for an improvised explosive device (IED), with the explosive train carried as payload rather than engineered into a manufactured warhead. Public reporting identifies hexogen, the German designation for cyclotrimethylenetrinitramine (RDX), as the material recovered at the Kabelsketal site on 15 August 2026, at an initially assessed mass of about 50 grams; the relationship between that material and the airframe found there the previous day has not been stated on the record. RDX is a secondary high explosive, which at this scale means it will not function from flame or friction. Its presence therefore implies a complete explosive train behind it: an initiator, on the balance of probability an electric detonator, and in most improvised configurations either a discrete booster or a sensitised RDX-based composition performing that role. On performance, the figure usually quoted for RDX, about 8,750 metres per second, belongs to a charge pressed close to its theoretical maximum density of roughly 1.80 grams per cubic centimetre. Values near 1.82 grams per cubic centimetre describe the crystal rather than anything a pressed charge attains, and a measured velocity also moves with charge diameter, confinement and particle size, so quoted figures are comparable only where those conditions are stated. That caveat carries weight here, because a neat RDX figure cannot be read across to a formulation: Composition C-4, which is RDX in a plastic binder, runs nearer 8,040 metres per second, and Semtex grades, whose RDX is diluted with PETN and binder, sit lower again. NATO holds the material specification for RDX at STANAG 4022 and its associated Allied Ordnance Publication AOP-4022, and the qualification framework at STANAG 4170 and AOP-7. Neither governs an improvised charge, but together they define what a stated RDX figure is supposed to mean.

Net Explosive Quantity (NEQ) for the 14 August airframe is therefore in the order of 50 grams if the reported fill is confirmed, which places it in the hand-grenade band rather than the demolition-charge band. Reporting on the 4 to 5 August device is materially different, and materially less firm. The consolidated open-source account describes its fill as Semtex, a plastic explosive whose usual formulations are based on RDX and pentaerythritol tetranitrate (PETN) in varying proportions, which means the two devices may share a nitramine base without sharing a formulation. Charge masses circulating for that device, including figures in the several-hundred-gram range, trace to regional press rather than to the Federal Prosecutor or the Bundeskriminalamt, and ISC has not seen any of them confirmed on the record. They should not be set alongside the 50 gram figure as though the two were equally established. For classification purposes an assembled device of either type, unpackaged and with an initiating system fitted, would be handled as Hazard Division 1.1, with the Compatibility Group turning on whether the initiator is assessed as separable from the main charge.

Fifty grams of hexogen is a small charge by ordnance standards and a very large one by aviation standards. The target set is not airframe structure. It is tyres, brake units, hydraulic runs and the wing-root fuel tanks. ISC Defence Intelligence technical assessment, 26 August 2026

Analysis of Effects

Two details in the 25 August reporting matter more than the explosive masses. The first is Kursdorf, north of the airport, where investigators found an antenna and electronic components taped to a tree. That is a command-link extension, and it tells you the operating concept was a controlled approach rather than a pre-programmed autonomous run. The second is what was found alongside it: scorched earth and metal fragments, which investigators are examining as a possible functioning site. If that assessment holds, it points to either a test firing, a disposal action, or a device that functioned prematurely. Each of those three readings has a different implication for how many devices were built and how competent the builders are, and none of them can be resolved from open sources at this point. On attribution the German interior minister, Alexander Dobrindt, has said the work was done by professionals and probably on behalf of a foreign power; United States officials have gone further and linked the devices to a Russian intelligence service, which Moscow denies. No German prosecuting authority has named a service or a person, and for the technical reader the distinction that matters is not the flag but the tradecraft, which reads as trained rather than improvised.

The choice of Leipzig-Halle is not incidental. The airport carries military freight for the Bundeswehr and for NATO allies, and it hosts Antonov Airlines, the Ukrainian outsize-cargo operator. A charge in the tens or hundreds of grams cannot destroy a freighter, but it does not need to. Placed against a main landing gear assembly it can put an aircraft into an extended maintenance state and take a scarce airlift asset out of the rotation. The knock-on effects on the night of 4 to 5 August illustrate the same economics from the other direction: a passenger service from Mallorca and several freighters were diverted, and a Boeing 757 freighter that broke off its approach collided with an object about six kilometres out and diverted to Hanover with airframe damage, reported variously as forward-fuselage and as empennage, a discrepancy that matters because it changes the collision geometry and therefore the airframe being looked for. The disruption cost of a 50 gram charge is measured in aircraft movements, not in blast radius.

Personnel and Safety Considerations

For anyone likely to encounter one of these airframes, the operating assumption should be that the device is armed, that the command link may still be live, and that an anti-handling arrangement is possible even where none has yet been reported. An electric initiator brings radio frequency hazard into play, which argues for transmitter control inside the cordon and for remote means as the default. The German response has been consistent with that: a remotely operated disposal vehicle, X-ray characterisation before any approach, and disposal in situ rather than recovery. The doctrine here is ordinary explosive ordnance disposal doctrine applied to an object that arrives by air. IMAS 09.30 remains the right procedural and reporting baseline; the hazard classification of a recovered item follows the UN Recommendations on the Transport of Dangerous Goods and its Manual of Tests and Criteria, Test Series 1 to 8, and the aerodrome-security wrapper around all of it is ICAO Annex 17 as given domestic effect in Germany by the Luftsicherheitsgesetz. None of that is new. The harder gap is not the render-safe procedure. It is detection and cordon management on an active civil airfield that cannot simply stop moving aircraft.

Data Gaps

Explosive masses are reported rather than officially confirmed, and the two figures come from sources with different levels of access. No airframe type, all-up mass, payload attachment method or endurance figure has been published. The initiation mechanism is unstated: command, timer, victim-operated and impact-initiated designs would each imply a different builder skill level. Whether a distinct second device exists, or the same object was described twice across language editions, is unresolved in the English-language reporting. The Kursdorf site has not been characterised, no arrest has been reported, and attribution rests on a general suspicion of Russian-directed sabotage across a pattern of incidents rather than a finding on these devices.

Corrections & updates welcome. If you hold open-source data that refines or corrects any parameter in this article, please contact [email protected] citing the specific claim and your source. Verified corrections will be incorporated and credited in the revision history. AI-assisted technical assessment based on open-source material. Not a formal intelligence product.