High severity8.1NVD Advisory· Published Aug 10, 2026
CVE-2026-66407
CVE-2026-66407
Description
DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.