CVE-2026-66408

5.1 mediumEPSS 0.2%

Medium (5.1). EPSS 0.2% chance of exploitation in the next 30 days.

The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root account.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

4.6 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-1391
Published: 2026-08-10
Modified: 2026-08-28
Record from: the NVD, synced 2026-10-19

References

https://jvn.jp/en/vu/JVNVU92804348/
https://robot.hellohas.co.jp/news/update_20260331/

Check your stack JSON