CVE-2026-93289

OS command injection in Eufy Omni C20, Omni X10 Pro PUBLISHED

Description (CNA)

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.

Affected (CNA)

Vendor / product	Versions
Eufy / Omni C20	affected 0 before 1.6.4
Eufy / Omni X10 Pro	affected 0 before 1.6.4

CWE

CWE-78

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-02

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.