CVE-2026-66407 in DEEBOT PRO M1
Сводка
по MITRE • 10.08.2026
DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.