Description
Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Eufy | Omni C20 | < 1.4.6 | 1.4.6 |
Advisories 1
- ICSA-26-267-02 Eufy Omni C20, Omni X10 Pro (Update A) CISA ICS & IT advisories · Oct 27, 2026