Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-93291

Improper certificate validation in Eufy Omni C20

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Eufy
Products
Omni C20
CVE-2026-93290

Use of Hard-coded Credentials in Eufy Omni C20

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Eufy
Products
Omni C20
CVE-2026-93289

OS command injection in Eufy Omni C20, Omni X10 Pro

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.

CVSS 4.0 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Eufy
Products
Omni C20 Omni X10 Pro