CVE Catalog
CVE-2026-66410
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk0.17%
6th percentile - higher than 6% of all known CVEs
Summary
Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered.
Risk Assessment
A man-in-the-middle attacker can intercept or modify communication between the app and the server, potentially leading to data leakage or unauthorized actions.
Recommendation
Update the ECOVACS PRO App to a patched version and avoid using untrusted Wi-Fi networks.
Original NVD description (English source)
Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered.