https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:14:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-350754 EUVD-2026-350754 https://cve.radiocsirt.org/vuln/euvd-2026-350754 https://cve.radiocsirt.org/vuln/fkie_cve-2026-66409 <p>DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot.</p> <p>DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-66409 https://cve.radiocsirt.org/vuln/ghsa-829w-c4jv-vqj4 <p>DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot.</p> <p>DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot.</p> https://cve.radiocsirt.org/vuln/ghsa-829w-c4jv-vqj4 https://cve.radiocsirt.org/vuln/jvndb-2026-026400 <p>Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, and mobile app ECOVACS PRO App developed by ECOVACS ROBOTICS contain multiple vulnerabilities. They are provided in Japan by Hellohas Robotics Inc.&lt;ul&gt;&lt;li&gt;web server for debugging purposes remains enabled (CWE-489) - CVE-2026-66403&lt;/li&gt;&lt;li&gt;Missing server certificate verification in MQTT communications (CWE-295) - CVE-2026-66404&lt;/li&gt;&lt;li&gt;telnet server remains enabled (CWE-489) - CVE-2026-66405&lt;/li&gt;&lt;li&gt;Missing server certificate verification in wget command (CWE-295) - CVE-2026-66406&lt;/li&gt;&lt;ul&gt;&lt;li&gt;A man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected product.&lt;/li&gt;&lt;/ul&gt;&lt;li&gt;Use of a Broken or Risky Cryptographic Algorithm in WebSocket communication authentication (CWE-327) - CVE-2026-66407&lt;/li&gt;&lt;ul&gt;&lt;li&gt;A man-in-the-middle attack could allow an attacker to analyze the WebSocket private key.&lt;/li&gt;&lt;/ul&gt;&lt;li&gt;Weak password for root account (CWE-1391) - CVE-2026-66408&lt;/li&gt;&lt;li&gt;Weak password for Wi-Fi hotspot network (CWE-1391) - CVE-2026-66409&lt;/li&gt;&lt;li&gt;Improper server certificate verification in the smartphone app (CWE-295) - CVE-2026-66410&lt;/li&gt;&lt;li&gt;Dependency on vulnerable third-party component (CWE-1395)&lt;/li&gt;&lt;ul&gt;&lt;li&gt;Known vulnerability in Quectel EG25-G device (CVE-2021-31698)&lt;/li&gt;&lt;/ul&gt;&lt;li&gt;Incorrect implementation of authentication algorithm in Websocket communications (CWE-303) - CVE-2026-66411&lt;/li&gt;&lt;/ul&gt;Hellohas Robotics Inc. reported and coordinated these vulnerabilities with ECOVACS ROBOT…</p> <p>Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, and mobile app ECOVACS PRO App developed by ECOVACS ROBOTICS contain multiple vulnerabilities. They are provided in Japan by Hellohas Robotics Inc.&lt;ul&gt;&lt;li&gt;web server for debugging purposes remains enabled (CWE-489) - CVE-2026-66403&lt;/li&gt;&lt;li&gt;Missing server certificate verification in MQTT communications (CWE-295) - CVE-2026-66404&lt;/li&gt;&lt;li&gt;telnet server remains enabled (CWE-489) - CVE-2026-66405&lt;/li&gt;&lt;li&gt;Missing server certificate verification in wget command (CWE-295) - CVE-2026-66406&lt;/li&gt;&lt;ul&gt;&lt;li&gt;A man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected product.&lt;/li&gt;&lt;/ul&gt;&lt;li&gt;Use of a Broken or Risky Cryptographic Algorithm in WebSocket communication authentication (CWE-327) - CVE-2026-66407&lt;/li&gt;&lt;ul&gt;&lt;li&gt;A man-in-the-middle attack could allow an attacker to analyze the WebSocket private key.&lt;/li&gt;&lt;/ul&gt;&lt;li&gt;Weak password for root account (CWE-1391) - CVE-2026-66408&lt;/li&gt;&lt;li&gt;Weak password for Wi-Fi hotspot network (CWE-1391) - CVE-2026-66409&lt;/li&gt;&lt;li&gt;Improper server certificate verification in the smartphone app (CWE-295) - CVE-2026-66410&lt;/li&gt;&lt;li&gt;Dependency on vulnerable third-party component (CWE-1395)&lt;/li&gt;&lt;ul&gt;&lt;li&gt;Known vulnerability in Quectel EG25-G device (CVE-2021-31698)&lt;/li&gt;&lt;/ul&gt;&lt;li&gt;Incorrect implementation of authentication algorithm in Websocket communications (CWE-303) - CVE-2026-66411&lt;/li&gt;&lt;/ul&gt;Hellohas Robotics Inc. reported and coordinated these vulnerabilities with ECOVACS ROBOT…</p> https://cve.radiocsirt.org/vuln/jvndb-2026-026400