Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-66404 EUVD-2026-55111GHSA-fpq4-v8rh-q68m

DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activity logs stored on t…

Published Aug 10, 2026 · Updated Aug 10, 2026 · Assigned by jpcert

Vendor: ECOVACS ROBOTICS Product: DEEBOT PRO K1VAC Product: DEEBOT PRO M1

Description

DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activity logs stored on the affected products may be retrieved.

Affected products

VendorProductAffectedFixed
ECOVACS ROBOTICS DEEBOT PRO M1 < M1-1.7.27 M1-1.7.27
ECOVACS ROBOTICS DEEBOT PRO K1VAC < V1.7.821 V1.7.821

References