Main Vulnerability Database Vulnerabilities #VU140800

Use of Weak Credentials in DEEBOT PRO M1 and DEEBOT PRO K1VAC - CVE-2026-66408

Published: August 3, 2026

Vulnerability identifier: #VU140800

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-66408

CWE-ID: CWE-1391

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local attacker to gain access to potentially sensitive information.

The vulnerability exists due to weak password for root account. An attacker with physical access can obtain product's root password.

DEEBOT PRO M1
DEEBOT PRO K1VAC

Install updates from vendor's website.

DEEBOT PRO M1 - update to M1-1.7.27
DEEBOT PRO K1VAC - update to 1.7.821