CVE-2026-66403CWE-489

CVE-2026-66403

High · published August 10, 2026

CVSS v3.1

7.5

EPSS

Percentile

36.5

In the wild

Unconfirmed

What it is

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor map and log information stored on the affected products may be retrieved.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00432 · 36.5th percentile
Weakness: CWE-489 · Active Debug Code
Published: 2026-08-10T13:17Z

References (2)

https://jvn.jp/en/vu/JVNVU92804348/ · [email protected]https://robot.hellohas.co.jp/news/update_20260331/ · [email protected]

EPSS history

Timeline

10 AUG 07:58Z
DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled
cvelistv5