Telnet Vulnerability in DEEBOT PRO Products from Ecovacs Robotics

CVE-2026-66405

What is CVE-2026-66405?

DEEBOT PRO M1 and DEEBOT PRO K1VAC devices from Ecovacs Robotics have the telnet service enabled, potentially allowing unauthorized access. This vulnerability arises from the lack of proper configuration, which can be exploited by attackers to gain control over the devices. Users should ensure that telnet access is disabled to mitigate risks associated with unauthorized remote login and device manipulation.

References