CVE Feed

    Dashboard / CVE / CVE-2026-66408

    CVE-2026-66408

    The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root account.

    Published:Aug 10, 2026
    Last Modified:Aug 11, 2026
    EPS:Aug 10, 2026
    EPSS Score:0.00204
    CVSS Score:4.6

    Affected Products

    Vendor
    Ecovacs Robotics
    Product
    Deebot Pro K1vac
    Vendor
    Ecovacs Robotics
    Product
    Deebot Pro M1

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-1391 Use of Weak Credentials

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-66411 (CVSS 6.9) — DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications.…
    CVE-2026-66409 (CVSS 6.9) — DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The p…
    CVE-2026-66407 (CVSS 7.7) — DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSoc…
    CVE-2026-66406 (CVSS 2.3) — DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the…
    CVE-2026-66405 (CVSS 8.7) — DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be leveraged to lo…
    CVE-2026-66404 (CVSS 6) — DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs …
    CVE-2026-66403 (CVSS 8.7) — DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor map and log …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High