Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
A new vulnerability with increased severity was disclosed for ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC (CVE-2026-66407) https://vuldb.com/vuln/387372
Post summary
A new vulnerability (CVE-2026-66407) affecting ECOVACS Robotic DEEBOT PRO models has been disclosed, with a note of increased severity.