Skip to content
OpenAdvisories
Medium · 4.6 CVE-2026-66408 EUVD-2026-55115GHSA-qcc9-63j4-p26h

The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allo…

Published Aug 10, 2026 · Updated Aug 10, 2026 · Assigned by jpcert

Vendor: ECOVACS ROBOTICS Product: DEEBOT PRO K1VAC Product: DEEBOT PRO M1

Description

The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords.
Physical access to an affected product may allow to obtain the password of the root account.

Affected products

VendorProductAffectedFixed
ECOVACS ROBOTICS DEEBOT PRO M1 < M1-1.7.27 M1-1.7.27
ECOVACS ROBOTICS DEEBOT PRO K1VAC < V1.7.821 V1.7.821

References