CVE-2026-66407 in DEEBOT PRO M1
要約
〜によって MITRE • 2026年08月10日
DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.