Known vulnerabilities in DEEBOT PRO M1

Vendor: ECOVACS
Software: DEEBOT PRO M1
Software CPE: cpe:2.3:h:ecovacs:deebot_pro_m1:*:*:*:*:*:*:*:*
Website: https://www.ecovacs.com/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DEEBOT PRO M1 DEEBOT PRO M1 is affected by 9 known vulnerabilities: 3 high, 5 medium, 1 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140805 - Incorrect Implementation of Authentication Algorithm
CVE-2026-66411		 CWE-303 Medium
No
No
 M1-1.7.27 03.08.2026 -
#VU140804 - Dependency on Vulnerable Third-Party Component
CVE-2021-31698		 CWE-1395 High
No
No
 M1-1.7.27 03.08.2026 -
#VU140803 - Use of Weak Credentials
CVE-2026-66409		 CWE-1391 Medium
No
No
 M1-1.7.27 03.08.2026 -
#VU140800 - Use of Weak Credentials
CVE-2026-66408		 CWE-1391 Low
No
No
 M1-1.7.27 03.08.2026 -
#VU140799 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-66407		 CWE-327 High
No
No
 M1-1.7.27 03.08.2026 -
#VU140798 - Improper Certificate Validation
CVE-2026-66406		 CWE-295 High
No
No
 M1-1.7.27 03.08.2026 -
#VU140797 - Active Debug Code
CVE-2026-66405		 CWE-489 Medium
No
No
 M1-1.7.27 03.08.2026 -
#VU140794 - Improper Certificate Validation
CVE-2026-66404		 CWE-295 Medium
No
No
 M1-1.7.27 03.08.2026 -
#VU140793 - Active Debug Code
CVE-2026-66403		 CWE-489 Medium
No
No
 M1-1.7.27 03.08.2026 -