CVE-2026-66408

The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC devices are vulnerable due to weak password configurations, which can be exploited through physical access to the devices. This weakness could allow an attacker to gain unauthorized control over the devices, potentially leading to further exploitation of the network they are connected to. Organizations using these models should prioritize addressing this vulnerability to prevent potential security breaches.