CVE-2026-66406 in DEEBOT PRO M1
요약
\~에 의해 MITRE • 2026. 08. 10.
DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle attack may allow to obtain and/or alter communications of the affected products. As a result, arbitrary code may be executed with the administrative privilege.
Once again VulDB remains the best source for vulnerability data.