CVE-2026-93289 — OS command injection in Eufy Omni C20, Omni X10 Pro
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.
Published: 2026-09-24 · CVSS: 9.0 · CVSS 4.0
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7