CVE-2026-66409
Medium · 5.3CVSS
5.3
EPSS
—
Published
Aug 10, 2026
CISA due date
—
The record
DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-79679 Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used… CWE-1391
- CVE-2026-66408 The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak… CWE-1391
- CVE-2026-57473 A vulnerability exists in the netclient and factory services of Reolink Home Hub… CWE-1391
- CVE-2026-47325 ProjectsAndPrograms school-management-system uses predictable credentials by generating… CWE-1391
- CVE-2026-4377 Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does… CWE-1391
- CVE-2026-35089 In Slican telephone exchanges secure key is generated in a predictable manner using… CWE-1391
- CVE-2026-45363 ruby-jwt: Empty-key HMAC bypass; cross-language sibling of CVE-2026-44351 CWE-1391
- GHSA-gxhx-2686-5h9g slack-go `SecretsVerifier` accepts empty signing secret without precondition CWE-1391