← CVE Intelligence

CVE-2026-66407

ECOVACS ROBOTICS / DEEBOT PRO M1 PUBLISHED

Description (CNA)

DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered.

Affected (CNA)

Vendor / productVersions
ECOVACS ROBOTICS / DEEBOT PRO M1affected 0 before M1-1.7.27
ECOVACS ROBOTICS / DEEBOT PRO K1VACaffected 0 before V1.7.821

CWE

CWE-327

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.