https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T05:37:15.839976+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-66406 CVE-2026-66406 2026-10-06T05:37:15.870654+00:00

Affected: ECOVACS ROBOTICS DEEBOT PRO M1, ECOVACS ROBOTICS DEEBOT PRO K1VAC

DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle attack may allow to obtain and/or alter communications of the affected products. As a result, arbitrary code may be executed with the administrative privilege.