CVE-2026-66404

The DEEBOT PRO M1 and DEEBOT PRO K1VAC vacuum cleaners are vulnerable due to a lack of server certificate validation in their MQTT communications, potentially allowing unauthorized access to operation and activity logs. This could lead to the exposure of sensitive user data and compromise privacy. Users and organizations utilizing these devices should prioritize addressing this vulnerability to mitigate risks associated with data leakage.