CVE-2026-66404

MEDIUM CVSS 6.5 View on NVD ↗

Description

DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activity logs stored on the affected products may be retrieved.

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

References

https://jvn.jp/en/vu/JVNVU92804348/
https://robot.hellohas.co.jp/news/update_20260331/

Published: Aug 10, 2026 09:17 UTC Modified: Aug 10, 2026 18:18 UTC