Eufy vulnerabilities
Published CVEs affecting Eufy products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-93291
Critical · 9.4
CWE-295 Sep 24, 2026
Improper certificate validation in Eufy Omni C20
Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code.
CVE-2026-93290
Medium · 5.5
CWE-798 Sep 24, 2026
Use of Hard-coded Credentials in Eufy Omni C20
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data.
CVE-2026-93289
High · 7.5
CWE-78 Sep 24, 2026
OS command injection in Eufy Omni C20, Omni X10 Pro
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.