VULNERABILITY INTELLIGENCE
CVE-2026-66404
CVSS score6.5 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2026-08-10
Last modified2026-08-28
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
Description
DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activity logs stored on the affected products may be retrieved.
Weakness classification
- vultures@jpcert.or.jp: CWE-295