| Roborock Q7 M5+ | None | None | Yes (reset Wi-Fi; it turns itself off) | Buttons only; app and Roborock account | None (no Matter; Home Assistant Q-series support varies, cloud setup; not on Valetudo) | Dated: ends 4 June 2027 | No CVE or CISA advisory names Roborock |
| Roborock Qrevo S Pro | None (structured light) | None | Yes ("Deactivating WiFi") | Buttons only; maker says app and terms are needed "as intended" | Home Assistant with cloud setup; Matter footnoted as coming | Dated: ends 5 May 2027 | As above |
| Dreame D20 Plus | None | None | Yes (hold Dock, press Power ten times; any button turns it back on) | Buttons only; Dreamehome sign-up | None | None published for the US unit | Dreamehome app TLS flaw, fixed (CISA) |
| Dreame L40 Ultra Gen 2 | None | None | Disconnect (hold Reset) | Buttons only; Dreamehome sign-up | Matter footnoted as coming; Gen 2 not on Valetudo | None published for the US unit | Same app flaw, fixed |
| Tapo RV30 Max Plus | None | None | No (Energy Saving mode charges only) | TP-Link ID for setup and schedules | Matter 1.3 (rooms not expected); Home Assistant local after a cloud sign-in | None published for the US unit | No Tapo CVE names a robot vacuum |
| eufy Omni C28 | None | None | No (reset only) | eufy account for setup | None (no Matter or HomeKit) | None published | Predecessor's pairing flaw (CISA, Sep 2026); whether shared is open |
| Shark AI Ultra AV2501S | None | Not listed (no Shark guide found) | Not found | SharkClean app on a constant network for rooms and schedules | None (Home Assistant polls Shark's cloud; no Matter) | None published for the US unit | July 2026 Shark cloud flaw; this model not named |
| iRobot Roomba 105 Vac | None | None | No procedure in the guide | Buttons only; account not stated | None (Home Assistant doesn't support it; no Matter) | None published for the US unit | None found |
| eufy Omni S2 | Yes, no live view | None | No (reset only) | eufy account for setup | Matter; ran internet-blocked with rooms for three days (The Hook Up) | None published | Not named in CISA's eufy advisory |
| eufy Omni E25 | Yes, no live view | None | No (reset only) | eufy account | Matter 1.4 with rooms; offline untested | None published | Not named in CISA's eufy advisory |
| ECOVACS DEEBOT T90 Pro Omni | Yes | Yes, voice control | Yes (long hold on the dock button) | Manual use without accepting the privacy policy | Matter (untested); Home Assistant via cloud or a self-hosted server | None published for the US unit | No advisory names the T90; the brand has the most CVEs here |
| MOVA P10 Pro Ultra | Yes, live video | Yes | Yes (hold Dock) | MOVAhome app; account not stated | Valetudo (serials starting R2491) | None published | MOVAhome iOS TLS flaw, fixed; no disclosure channel |
| MOVA V70 Ultra Complete | Yes | Yes | Yes (hold Dock) | MOVAhome app | None | None published | Same app flaw, fixed; no disclosure channel |
| Dreame L60 Ultra PE | Two | Yes, onboard voice | Disconnect (hold Reset) | Dreamehome sign-up | Matter claimed, untested | None published for the US unit | Dreame app flaws; sibling X50 camera flaw (Korea), patched |
| Dreame X60 Max Ultra Complete | Two | Yes, onboard voice | Disconnect (hold Reset) | Dreamehome sign-up | Matter; internet-blocked run reported by The Hook Up, which notes one unnamed exception among its seven robots | None published for the US unit | As L60 Ultra PE |
| Roborock Saros 10R | Yes | Yes ("Hello Rocky", switchable per Roborock) | Yes (turns off after waiting for a connection) | Roborock account | Matter; Home Assistant with cloud | Dated: ends 30 June 2027 | None found |
| Matic | Five | Four (voice opt-in, sent to Google Gemini) | Not published; owners run it on a local network only | No login (RTINGS) | Apple Home, Google Home and Home Assistant pairing; Matter not named | None published; no disclosure channel | None found; one-tap clip upload to Matic (RTINGS) |