Known Vulnerabilities for DEEBOT PRO M1 by ECOVACS ROBOTICS
Listed below are 10 of the newest known vulnerabilities associated with "DEEBOT PRO M1" by "ECOVACS ROBOTICS".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-66411 json | DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenti... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-66409 json | DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be ... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-66408 json | The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected p... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-66407 json | DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-66406 json | DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle attack ... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-66405 json | DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be leveraged to log in to the aff... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-66404 json | DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activity lo... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-66403 json | DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor map and log information sto... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2025-44251 json | Ecovacs Deebot T10 1.7.2 transmits Wi-Fi credentials in cleartext during the pairing process. | Not Provided | 2025-07-10 | 2026-07-05 |
| CVE-2024-42911 json | ECOVACS Robotics Deebot T20 OMNI and T20e OMNI before 1.24.0 was discovered to contain a WiFi Remote Code Execution vulnerabi... | Not Provided | 2025-01-14 | 2026-07-05 |