LOW 2.3 NVD

CVE-2026-66406

DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle attack may allow to obtain and/or alter co

DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle attack may allow to obtain and/or alter communications of the affected products. As a result, arbitrary code may be executed with the administrative privilege.

References

https://jvn.jp/en/vu/JVNVU92804348/
https://robot.hellohas.co.jp/news/update_20260331/

Published: 2026-08-10 · Source: NVD · Feed updated: 2026-08-10

This low severity vulnerability with a CVSS score of 2.3 was published on 2026-08-10 via NVD.

vulnfeed aggregates 9044 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.