What is GHSA-qcc9-63j4-p26h?

GHSA-qcc9-63j4-p26h is a security advisory published by GitHub Security Advisories with Medium severity. The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords....

Which CVE IDs does GHSA-qcc9-63j4-p26h cover?

GHSA-qcc9-63j4-p26h covers the following CVE IDs: CVE-2026-66408. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qcc9-63j4-p26h?

GHSA-qcc9-63j4-p26h has a CVSS v3 base score of 4.6, published by GitHub Security Advisories.

GHSA-qcc9-63j4-p26hMediumCVSS 4.6

The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords....

Vendor

GitHub Security Advisories

Published

August 10, 2026

Last Modified

August 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-66408 →

📋 Description

The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root account.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-66408
https://jvn.jp/en/vu/JVNVU92804348
https://robot.hellohas.co.jp/news/update_20260331
https://github.com/advisories/GHSA-qcc9-63j4-p26h