Eufy Omni C20, Omni X10 Pro

CISA published an advisory (2026-09-24) reporting critical vulnerabilities (CVSS v3 9.4) in Eufy Omni C20 and Omni X10 Pro cameras — including OS command injection, use of hard-coded credentials, and improper certificate validation — affecting firmware versions prior to 1.6.4; successful exploitation could enable arbitrary code execution or unauthorized access. The advisory lists affected products and CWEs, provides recommended mitigations (network isolation, updated VPNs, defensive measures), credits the reporter, and states there is no known public exploitation at this time.