Description
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Eufy | Omni C20 | < 1.4.6 | 1.4.6 |
| Eufy | Omni X10 Pro | < 3.1.36 | 3.1.36 |
Advisories 1
- ICSA-26-267-02 Eufy Omni C20, Omni X10 Pro (Update A) CISA ICS & IT advisories · Oct 27, 2026