CVE-2026-66406

Name of the Vulnerable Software and Affected Versions DEEBOT PRO M1 (affected versions not specified) DEEBOT PRO K1VAC (affected versions not specified)

Description These products use the wget command with server certificate validation disabled. This flaw allows a man-in-the-middle attack, where an attacker can intercept or modify communications, potentially leading to the execution of arbitrary code with administrative privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.