Multiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App
Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, and mobile app ECOVACS PRO App developed by ECOVACS ROBOTICS contain multiple vulnerabilities. They are provided in Japan by Hellohas Robotics Inc.
Details
Original advisory: https://jvn.jp/en/vu/JVNVU92804348/
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Moderate exploitation riskCVE-2021-316981.9% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 78% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-66403 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66404 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66405 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66406 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66407 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66408 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66409 | coverage & exploitation status | NVD · CVE.org |
| CVE-2021-31698 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66411 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66410 | coverage & exploitation status | NVD · CVE.org |
More from JVN (Japan Vulnerability Notes)
- unknownPermissive regular expression vulnerability in Tegalog -Fumy Otegaru Memo Logger-2026-07-31
- unknownSharp Network Scanner Tool insecure initial configuration2026-07-31
- unknownMultiple vulnerabilities in Sharp and Toshiba Tec MFPs2026-07-31
- unknownCSV file injection vulnerability in BaserCMS2026-07-31
- unknownSecurity Update for Trend Micro Trend Vision One (July 2026)2026-07-30