DEEBOT PRO K1VAC vulnerabilities

2 known vulnerabilities in DEEBOT PRO K1VAC from ECOVACS ROBOTICS. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  DEEBOT PRO M1: Use of a Broken or Risky Cryptographic Algorithm

  CVE-2026-66407Aug 10, 2026ECOVACS ROBOTICS

  DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered.

• 7.5 High severity

  DEEBOT PRO M1: Active Debug Code

  CVE-2026-66403Aug 10, 2026ECOVACS ROBOTICS

  DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor map and log information stored on the affected products may be retrieved.