CVE-2026-93289

HIGH

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.

CVSS v3.1 Score

7.5
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Complexity
HIGH
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 9/24/2026Modified: 9/24/2026

Related Intelligence (1)

CRITICALVulnerability

Eufy Omni C20, Omni X10 Pro

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-267-02.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to run system level commands or execute arbitrary code.</strong></p> <p>The following versions of Eufy Omni C20, Omni X10 Pro are affected:</p> <ul> <li>Omni C20

CVE-2026-93289CVE-2026-93290
CISA Advisories

References (1)

https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-02