All 8 CVE vulnerabilities found in DEEBOT PRO M1, with AI-generated Chinese analysis, references, and POCs.
Vendor: ECOVACS ROBOTICS
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-66411 | DEEBOT PRO M1/K1VAC WebSocket认证绕过 CWE-303 | 5.3 | Medium | 2026-08-10 |
| CVE-2026-66409 | 科沃斯DEEBOT PRO M1/K1VAC弱密码漏洞 CWE-1391 | 5.3 | Medium | 2026-08-10 |
| CVE-2026-66408 | 科沃斯扫地机器人ROOT弱口令 CWE-1391 | 4.6 | Medium | 2026-08-10 |
| CVE-2026-66407 | DEEBOT PRO M1/K1VAC WebSocket认证绕过漏洞 CWE-327 | 8.1 | High | 2026-08-10 |
| CVE-2026-66406 | DEEBOT PRO M1/K1VAC HTTPS验证绕过漏洞 CWE-295 | 4.8 | Medium | 2026-08-10 |
| CVE-2026-66405 | 科沃斯DEEBOT PRO M1/K1VAC存在Telnet未禁用漏洞 CWE-489 | 8.8 | High | 2026-08-10 |
| CVE-2026-66404 | DEEBOT PRO M1/K1 MQTT证书验证缺失致日志泄露 CWE-295 | 6.5 | Medium | 2026-08-10 |
| CVE-2026-66403 | DEEBOT PRO M1/K1 调试Web服务器漏洞致数据泄露 CWE-489 | 7.5 | High | 2026-08-10 |
All 8 known CVE vulnerabilities affecting DEEBOT PRO M1 with full Chinese analysis, references, and POCs where available.