CVE Catalog
CVE-2026-66411
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.39%
32th percentile - higher than 32% of all known CVEs
Summary
DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot.
Risk Assessment
An attacker can take control of the robot, potentially leading to privacy breaches, property damage, or other harm.
Recommendation
Update the robot firmware to a patched version and restrict access to the network where the robot is located.
Original NVD description (English source)
DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot.