Product · ECOVACS ROBOTICS

DEEBOT PRO M1

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 5.3

CVE-2026-66411

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unaut…

ECOVACS ROBOTICS DEEBOT PRO M1 DEEBOT PRO K1VAC

Aug 10, 2026
Medium 5.3

CVE-2026-66409

DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password ma…

ECOVACS ROBOTICS DEEBOT PRO K1VAC DEEBOT PRO M1

Aug 10, 2026
Medium 4.6

CVE-2026-66408

The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affec…

ECOVACS ROBOTICS DEEBOT PRO K1VAC DEEBOT PRO M1

Aug 10, 2026
Medium 4.8

CVE-2026-66406

DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle at…

ECOVACS ROBOTICS DEEBOT PRO M1 DEEBOT PRO K1VAC

Aug 10, 2026
Medium 6.5

CVE-2026-66404

DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activ…

ECOVACS ROBOTICS DEEBOT PRO K1VAC DEEBOT PRO M1

Aug 10, 2026