The CIA has reportedly warned Spain, France and Italy that Russia may be preparing to launch small explosive drones from commercial vessels sailing through the Mediterranean, according to a report first published by the Spanish daily El Mundo and independently reported by Defense News and C4ISRNET. The warning describes Gerbera-type drones — cheap, expendable Russian decoy-and-strike airframes — allegedly hidden inside shipping containers and launched from ships in international waters to strike targets on European soil.
French President Emmanuel Macron has rejected the claims, according to Newsweek, even as he convened his country's Defense Council on Sept. 16 and briefed party leaders and declared 2027 presidential candidates on Sept. 18 amid the circulating reports. The dispute over the warning's credibility comes during a week in which Russian drones and suspected sabotage incidents were recorded across Romania, Moldova, Poland and Germany — a pattern that Western analysts describe not as isolated incursions but as a deliberate campaign to erode NATO's airspace red lines.
What the CIA reportedly told European allies
According to the Defense News and C4ISRNET report, the CIA's assessment centers on the Gerbera, a small fixed-wing drone with a roughly 2.5-meter wingspan, an estimated range of about 600 kilometers, and a small incendiary warhead. The drones are often built as low-cost decoys to overwhelm air defenses, but Russia has also fielded armed and camera-equipped variants. The reported scenario has Gerbera drones smuggled inside shipping containers aboard commercial vessels transiting international Mediterranean waters, then launched to strike targets in Spain, France or Italy.
The report traces back to El Mundo, which cited an unnamed Lithuanian intelligence source. Notably, Defense News and C4ISRNET both flag that El Mundo's account "has not been independently corroborated." The timing has drawn attention because it follows a secretive visit by the CIA director to Moscow on Aug. 25, though the reporting does not establish a direct link between that visit and the contents of the alleged warning.
Precedent: this is not a hypothetical launch method
Skepticism about the specific Mediterranean warning aside, the underlying tactic — drones staged from ships — is not without precedent. Defense News and C4ISRNET report that Sweden's navy jammed a drone that was launching from a Russian intelligence-gathering vessel in the Öresund Strait in February 2026. Separately, an explosive drone was found near a Ukrainian cargo aircraft in early August, and a drone collided with a plane at Leipzig airport in Germany. None of these incidents is presented as proof that a Mediterranean vessel-launch plot exists, but together they establish that ship-based drone launches and drone-aviation near-misses are already a documented feature of the current threat environment, not a novel or far-fetched concept.
A week of incursions across NATO's flanks
The Mediterranean warning surfaced alongside a cluster of other incidents that Newsweek compiled into a map of Russian incursions and suspected sabotage across Europe this week. A Russian Gerbera-type drone crashed near Solca, Romania, on Sept. 24 after spending roughly four minutes in Romanian airspace, and another crashed the same day in Cernita, Moldova. Separately, four Russian drones overflew Ukraine's Chernivtsi Oblast heading toward Ukraine's border crossings with Moldova and Romania. In Germany, Berlin-Brandenburg airport was forced to suspend operations overnight Wednesday after a drone sighting. In Poland, officials blamed sabotage for a fire at a Starlink ground station.
Newsweek quotes Estonian foreign ministry spokesperson Susan Lilleväli on the pattern, and cites the Institute for the Study of War's assessment that the incursions are "part of the Kremlin's efforts to normalize airspace violations" — a framing that treats each individual event less as a one-off accident or provocation and more as a cumulative, deliberate effort to desensitize NATO members and their publics to Russian drones crossing into allied territory.
Why the Mediterranean claim is contested
The gap between the reported CIA warning and Macron's public rejection of it is the central tension in this story. On one hand, a NATO head of state with direct access to French and allied intelligence has pushed back on the claim. On the other, Macron convened his Defense Council specifically over these reports and briefed his country's political leadership on the matter — actions that suggest the French government treated the warning seriously enough to require a formal response, even if it ultimately disputes the conclusion reported by El Mundo. Both things can be true at once: a government can take an intelligence warning seriously as a precaution while still disputing its accuracy or the way it was characterized in the press.
It is also worth being precise about sourcing. The Mediterranean vessel-launch warning traces to a single anonymous Lithuanian intelligence source relayed through El Mundo, and neither Defense News, C4ISRNET nor Newsweek reports independent confirmation of the underlying CIA assessment itself. The broader pattern of incursions in Romania, Moldova, Germany and Poland this week is separately and more directly documented.
Why It Matters
For a drone-focused audience, the Mediterranean warning is notable less for its unconfirmed specifics and more for what it implies about the evolving threat model facing NATO's southern flank. Ports and shipping lanes have historically been treated as a maritime security problem rather than an air-defense one; a Gerbera launched from a container ship would blur that distinction, potentially bypassing the fixed radar coverage and layered air defenses that already struggle with cheap, low-signature drones crossing land borders in Romania, Poland and the Baltics.
The Öresund Strait jamming incident and the Leipzig airport collision show that ship-based launches and drone-aviation conflicts are not theoretical — they have already happened in some form, even if not at Mediterranean scale or against the specific targets described in the CIA warning. Combined with this week's confirmed incursions into Romanian and Moldovan airspace and the Berlin-Brandenburg shutdown, the picture that emerges is one in which NATO and EU states are being tested simultaneously on multiple fronts: land-border overflights in the east, port and airport disruptions in the center, and now an unconfirmed but taken-seriously warning about a new maritime vector in the south. Whether or not the specific Mediterranean plot is real, the drone-detection and interdiction gap it highlights — coastal and port security that was not designed around small fixed-wing UAS threats — is a real and growing vulnerability that European governments will need to address regardless of how this particular report is ultimately resolved.
