CVE-2026-93291: Eufy Omni c20

Critical severity, CVSS 9.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code.

Affected products

• Eufy Omni c20: before 1.6.4 (fixed in 1.6.4)

Published 2026-09-24. Last modified 2026-09-24.