Skip to content
OpenAdvisories
High · 7.5 CVE-2026-66403 EUVD-2026-55110GHSA-w22m-rfhf-hgj7

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor map and log information stored on the aff…

Published Aug 10, 2026 · Updated Aug 10, 2026 · Assigned by jpcert

Vendor: ECOVACS ROBOTICS Product: DEEBOT PRO K1VAC Product: DEEBOT PRO M1

Description

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor map and log information stored on the affected products may be retrieved.

Affected products

VendorProductAffectedFixed
ECOVACS ROBOTICS DEEBOT PRO M1 < M1-1.7.27 M1-1.7.27
ECOVACS ROBOTICS DEEBOT PRO K1VAC < V1.7.821 V1.7.821

References