Known vulnerabilities in DEEBOT PRO K1VAC

Vendor: ECOVACS
Software: DEEBOT PRO K1VAC
Software CPE: cpe:2.3:h:ecovacs:deebot_pro_k1vac:*:*:*:*:*:*:*:*
Website: https://www.ecovacs.com/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DEEBOT PRO K1VAC DEEBOT PRO K1VAC is affected by 9 known vulnerabilities: 3 high, 5 medium, 1 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140805 - Incorrect Implementation of Authentication Algorithm
CVE-2026-66411		 CWE-303 Medium
No
No
 1.7.821 03.08.2026 -
#VU140804 - Dependency on Vulnerable Third-Party Component
CVE-2021-31698		 CWE-1395 High
No
No
 1.7.821 03.08.2026 -
#VU140803 - Use of Weak Credentials
CVE-2026-66409		 CWE-1391 Medium
No
No
 1.7.821 03.08.2026 -
#VU140800 - Use of Weak Credentials
CVE-2026-66408		 CWE-1391 Low
No
No
 1.7.821 03.08.2026 -
#VU140799 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-66407		 CWE-327 High
No
No
 1.7.821 03.08.2026 -
#VU140798 - Improper Certificate Validation
CVE-2026-66406		 CWE-295 High
No
No
 1.7.821 03.08.2026 -
#VU140797 - Active Debug Code
CVE-2026-66405		 CWE-489 Medium
No
No
 1.7.821 03.08.2026 -
#VU140794 - Improper Certificate Validation
CVE-2026-66404		 CWE-295 Medium
No
No
 1.7.821 03.08.2026 -
#VU140793 - Active Debug Code
CVE-2026-66403		 CWE-489 Medium
No
No
 1.7.821 03.08.2026 -