Vendor

ECOVACS ROBOTICS

9 known vulnerabilities.

Products

DEEBOT PRO M1 8 DEEBOT PRO K1VAC 8 Android App "ECOVACS PRO" 1 iOS App "ECOVACS PRO" 1

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

Medium 5.3

CVE-2026-66411

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unaut…

ECOVACS ROBOTICS DEEBOT PRO M1 DEEBOT PRO K1VAC

Aug 10, 2026
Medium 4.8

CVE-2026-66410

Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or alt…

ECOVACS ROBOTICS Android App "ECOVACS PRO" iOS App "ECOVACS PRO" Android iOS

Aug 10, 2026
Medium 5.3

CVE-2026-66409

DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password ma…

ECOVACS ROBOTICS DEEBOT PRO K1VAC DEEBOT PRO M1

Aug 10, 2026
Medium 4.6

CVE-2026-66408

The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affec…

ECOVACS ROBOTICS DEEBOT PRO K1VAC DEEBOT PRO M1

Aug 10, 2026
Medium 4.8

CVE-2026-66406

DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle at…

ECOVACS ROBOTICS DEEBOT PRO K1VAC DEEBOT PRO M1

Aug 10, 2026
Medium 6.5

CVE-2026-66404

DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activ…

ECOVACS ROBOTICS DEEBOT PRO M1 DEEBOT PRO K1VAC

Aug 10, 2026