Medium · 4.8 CVE-2026-66410 EUVD-2026-55117GHSA-945x-4wx3-jqmg

Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered.

Published Aug 10, 2026 · Updated Aug 10, 2026 · Assigned by jpcert

Description

Android and iOS apps ECOVACS PRO App improperly validate server certificates.
Communication may be retrieved and/or altered.

Vendor	Product	Affected	Fixed
ECOVACS ROBOTICS	Android App "ECOVACS PRO"	< 1.3.82	1.3.82
ECOVACS ROBOTICS	iOS App "ECOVACS PRO"	< 1.3.82	1.3.82