Weak Passwords in DEEBOT PRO Models Expose Root Accounts

CVE-2026-66408

What is CVE-2026-66408?

The DEEBOT PRO M1 and DEEBOT PRO K1VAC models are vulnerable due to weak password configurations for their root accounts. If an attacker gains physical access to the devices, they may be able to retrieve the root account password, potentially enabling unauthorized access to the system settings and features. This vulnerability highlights the need for stronger password policies and the importance of securing physical access to smart devices.

References