Skip to contentEcovacs Robotics vulnerabilities
Newest
- ecovacs robotics deebot pro k1vac, deebot pro m1 +1 moreDEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket...CVE-2026-664116.9 Medium
- ecovacs robotics android app "ecovacs pro", ios app "ecovacs pro" +1 moreAndroid and iOS apps ECOVACS PRO App improperly validate server certificates.
Communication may...CVE-2026-664102.3 Low
- ecovacs robotics deebot pro k1vac, deebot pro m1 +1 moreDEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot...CVE-2026-664096.9 Medium
- ecovacs robotics deebot pro k1vac, deebot pro m1 +1 moreThe root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords....CVE-2026-664085.1 Medium
- ecovacs robotics deebot pro k1vac, deebot pro m1 +1 moreDEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication...CVE-2026-664077.7 High
- ecovacs robotics deebot pro k1vac, deebot pro m1 +1 moreDEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled....CVE-2026-664062.3 Low
- ecovacs robotics deebot pro k1vac, deebot pro m1 +1 moreDEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be...CVE-2026-664058.7 High
- ecovacs robotics deebot pro k1vac, deebot pro m1 +1 moreDEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications....CVE-2026-664046.0 Medium
- ecovacs robotics deebot pro k1vac, deebot pro m1 +1 moreDEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor...CVE-2026-664038.7 High