What is CVE-2026-66404?

CVE-2026-66404 is a medium-severity vulnerability, classified under Improper Certificate Validation. CVSS score: 6.5/10. Published 2026-08-10.

How severe is CVE-2026-66404?

Medium severity. CVSS v3 base score is 6.5 out of 10.

CVE-2026-66404

CVE-2026-66404

DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activity logs stored on the affected products may be retrieved.

Vulnerability class: Improper Certificate Validation

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N.

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

vultures@jpcert.or.jp
vultures@jpcert.or.jp

Frequently asked questions

What is CVE-2026-66404?: CVE-2026-66404 is a medium-severity vulnerability, classified under Improper Certificate Validation. CVSS score: 6.5/10. Published 2026-08-10.
How severe is CVE-2026-66404?: Medium severity. CVSS v3 base score is 6.5 out of 10.