Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2026-93289

OS command injection in Eufy Omni C20, Omni X10 Pro

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eufy Omni C20

Default version status: unaffected

  • 0 to < 1.4.6affected
  • 1.4.6unaffected

Eufy Omni X10 Pro

Default version status: unaffected

  • 0 to < 3.1.36affected
  • 3.1.36unaffected

References