Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Eufy Omni C20 1.4.6 Clear all filters
TI-2026-62910 CVE-2026-93291 · GHSA-mg87-pcwf-2hcm

Improper certificate validation in Eufy Omni C20

Priority MEDIUM 48

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00242 Published 2026-09-24 Fixed in 1.4.6 CWE-295
TI-2026-62909 CVE-2026-93290 · GHSA-3hh7-gvqr-8h7x

Use of Hard-coded Credentials in Eufy Omni C20

Priority LOW 29

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00112 Published 2026-09-24 Fixed in 1.4.6 CWE-798
TI-2026-62908 CVE-2026-93289 · GHSA-9vx9-rfcq-648m

OS command injection in Eufy Omni C20, Omni X10 Pro

Priority MEDIUM 42

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.

CVSS 4.0CRITICAL 9.0 Adjacent network No auth No interaction EPSS 0.0077 Published 2026-09-24 Fixed in 1.4.6, 3.1.36 CWE-78