ECOVACS ROBOTICS vulnerabilities
We track 2 vulnerabilities in ECOVACS ROBOTICS products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 10, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest ECOVACS ROBOTICS vulnerabilities
- 8.1 High severity
DEEBOT PRO M1: Use of a Broken or Risky Cryptographic Algorithm
DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered.
- 7.5 High severity
DEEBOT PRO M1: Active Debug Code
DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor map and log information stored on the affected products may be retrieved.