<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-25T15:34:39.975056+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9a684294-3ee1-45bd-a24e-a91516f690a0/export</id>
    <title>9a684294-3ee1-45bd-a24e-a91516f690a0</title>
    <updated>2026-09-25T15:34:39.998745+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9a684294-3ee1-45bd-a24e-a91516f690a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93291", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwcrpku4cn22", "content": "Eufy Omni C20 (&amp;lt;1.6.4) has a CRITICAL cert validation flaw (CVE-2026-93291). MITM risk &amp;amp; code execution possible. Patch status unconfirmed \u2014 review vendor updates. \ud83d\udd10 https://radar.offseq.com/threat/cve-2026-93291-cwe-295-improper-certificate-validation-in-eufy-omni-c20-63bb60225f0bad8d #OffSeq #I...", "creation_timestamp": "2026-09-25T03:00:27.557476Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9a684294-3ee1-45bd-a24e-a91516f690a0/export"/>
    <published>2026-09-25T03:00:27.557476+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fb31b24e-a389-4598-b795-b7d30a6ffa85/export</id>
    <title>fb31b24e-a389-4598-b795-b7d30a6ffa85</title>
    <updated>2026-09-25T15:34:40.000260+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fb31b24e-a389-4598-b795-b7d30a6ffa85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93291", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117329443213660434", "content": "CVE-2026-93291 (CRITICAL): Eufy Omni C20 (&amp;lt;1.6.4) fails certificate validation, exposing devices to MITM and arbitrary code execution. Patch status unknown \u2014 use strong network protections. https://radar.offseq.com/threat/cve-2026-93291-cwe-295-improper-certificate-validation-in-eufy-omni-c20-63bb60225f0bad8d #OffSeq #CVE202693291 #IoTSecurity #Vuln #Infosec", "creation_timestamp": "2026-09-25T03:00:26.830549Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fb31b24e-a389-4598-b795-b7d30a6ffa85/export"/>
    <published>2026-09-25T03:00:26.830549+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1c0568ab-d029-4286-b563-48475b9d586a/export</id>
    <title>1c0568ab-d029-4286-b563-48475b9d586a</title>
    <updated>2026-09-25T15:34:40.000365+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1c0568ab-d029-4286-b563-48475b9d586a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93291", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwcqbnouvb2u", "content": "Critical Eufy robot vacuum vulnerabilities expose the Omni C20 and X10 Pro to OS command injection. Patch CVE-2026-93289 and CVE-2026-93291 immediately.\n\n#Eufy #CVE202693289 #CVE202693291 #IoT #Cybersecurity #Vulnerability", "creation_timestamp": "2026-09-25T02:34:47.675048Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1c0568ab-d029-4286-b563-48475b9d586a/export"/>
    <published>2026-09-25T02:34:47.675048+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/94329515-6992-4f64-b171-0ae388424c1c/export</id>
    <title>94329515-6992-4f64-b171-0ae388424c1c</title>
    <updated>2026-09-25T15:34:40.000448+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "94329515-6992-4f64-b171-0ae388424c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93291", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwcbecinmq2y", "content": "\ud83d\udea8 CVE-2026-93291 \u2014 CVSS 9.3 CRITICAL\n\nOmni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93291\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-24T22:07:49.660389Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/94329515-6992-4f64-b171-0ae388424c1c/export"/>
    <published>2026-09-24T22:07:49.660389+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b1128495-175f-488e-8104-05c25244baa1/export</id>
    <title>b1128495-175f-488e-8104-05c25244baa1</title>
    <updated>2026-09-25T15:34:40.000527+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b1128495-175f-488e-8104-05c25244baa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93291", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwc3y6hpia2n", "content": "\ud83d\udd34 CVE-2026-93291 - Critical (9.4)\n\nOmni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93291/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T20:31:34.618365Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b1128495-175f-488e-8104-05c25244baa1/export"/>
    <published>2026-09-24T20:31:34.618365+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/92d2b535-a15c-4f98-9d33-98129d575e93/export</id>
    <title>92d2b535-a15c-4f98-9d33-98129d575e93</title>
    <updated>2026-09-25T15:34:40.000611+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "92d2b535-a15c-4f98-9d33-98129d575e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93291", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwc3vmjquy24", "content": "CVE-2026-93291 - omni c20\nThe Eufy Omni C20 camera does not properly verify the digital proof that its connection is genuine. Because of this, a malicious person could pretend to be the legitimate server, watch\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#omnic20 #eufy #CVE #infosec", "creation_timestamp": "2026-09-24T20:30:07.847648Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/92d2b535-a15c-4f98-9d33-98129d575e93/export"/>
    <published>2026-09-24T20:30:07.847648+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/50e28488-ef5a-44cc-808a-03cfd12e7844/export</id>
    <title>50e28488-ef5a-44cc-808a-03cfd12e7844</title>
    <updated>2026-09-25T15:34:40.000685+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "50e28488-ef5a-44cc-808a-03cfd12e7844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93291", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwbnbt5y4m2i", "content": "~Cisa~\nUnpatched Eufy Omni devices enable command injection or arbitrary code execution; update to 1.6.4+.\n-\nIOCs: CVE-2026-93289, CVE-2026-93290, CVE-2026-93291\n-\n#CVE202693289 #CVE202693290 #ThreatIntel", "creation_timestamp": "2026-09-24T16:08:31.335095Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/50e28488-ef5a-44cc-808a-03cfd12e7844/export"/>
    <published>2026-09-24T16:08:31.335095+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/09e4bb7d-603b-46c9-8cb3-d5b18c37b518/export</id>
    <title>09e4bb7d-603b-46c9-8cb3-d5b18c37b518</title>
    <updated>2026-09-25T15:34:40.000761+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "09e4bb7d-603b-46c9-8cb3-d5b18c37b518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-93291", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-02", "content": "", "creation_timestamp": "2026-09-24T05:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/09e4bb7d-603b-46c9-8cb3-d5b18c37b518/export"/>
    <published>2026-09-24T05:00:00+00:00</published>
  </entry>
</feed>
