Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-93289 1 Eufy 2 Omni C20, Omni X10 Pro 2026-09-25 7.5 High
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.
CVE-2026-93290 1 Eufy 1 Omni C20 2026-09-25 5.5 Medium
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data.
CVE-2026-93291 1 Eufy 1 Omni C20 2026-09-25 9.4 Critical
Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code.