CVE Catalog
CVE-2026-66408
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk0.20%
11th percentile - higher than 11% of all known CVEs
Summary
The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root account.
Risk Assessment
A person with physical access to the robot can gain administrator privileges, potentially leading to full compromise of the device.
Recommendation
Change the root password to a strong and unique one, and restrict physical access to the device.
Original NVD description (English source)
The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root account.