High · 8.8 CVE-2026-66405 EUVD-2026-55112GHSA-r54q-x638-f78v

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be leveraged to log in to the affected products.

Published Aug 10, 2026 · Updated Aug 10, 2026 · Assigned by jpcert

Description

Vendor	Product	Affected	Fixed
ECOVACS ROBOTICS	DEEBOT PRO M1	< M1-1.7.27	M1-1.7.27
ECOVACS ROBOTICS	DEEBOT PRO K1VAC	< V1.7.821	V1.7.821