MEDIUMVulnerability

CVE-2026-66411

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot.

Properties

severity
MEDIUM
score
5.3
cve_id
CVE-2026-66411
vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
published_at
2026-08-10T09:17:23.483
last_modified
2026-08-28T16:09:10.947

Related Entities (2)

DESCRIBED_BY (1)

[Source]NVD

HAS_WEAKNESS (1)

[Weakness]Incorrect Implementation of Authentication Algorithm

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-66411 — Ninja Signal Threat Intelligence | Ninja Signal