{"vulnerability": "CVE-2026-93291", "sightings": [{"uuid": "50e28488-ef5a-44cc-808a-03cfd12e7844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93291", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwbnbt5y4m2i", "content": "~Cisa~\nUnpatched Eufy Omni devices enable command injection or arbitrary code execution; update to 1.6.4+.\n-\nIOCs: CVE-2026-93289, CVE-2026-93290, CVE-2026-93291\n-\n#CVE202693289 #CVE202693290 #ThreatIntel", "creation_timestamp": "2026-09-24T16:08:31.335095Z"}, {"uuid": "09e4bb7d-603b-46c9-8cb3-d5b18c37b518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-93291", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-02", "content": "", "creation_timestamp": "2026-09-24T05:00:00.000000Z"}, {"uuid": "92d2b535-a15c-4f98-9d33-98129d575e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93291", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwc3vmjquy24", "content": "CVE-2026-93291 - omni c20\nThe Eufy Omni C20 camera does not properly verify the digital proof that its connection is genuine. Because of this, a malicious person could pretend to be the legitimate server, watch\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#omnic20 #eufy #CVE #infosec", "creation_timestamp": "2026-09-24T20:30:07.847648Z"}, {"uuid": "b1128495-175f-488e-8104-05c25244baa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93291", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwc3y6hpia2n", "content": "\ud83d\udd34 CVE-2026-93291 - Critical (9.4)\n\nOmni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93291/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T20:31:34.618365Z"}, {"uuid": "94329515-6992-4f64-b171-0ae388424c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93291", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwcbecinmq2y", "content": "\ud83d\udea8 CVE-2026-93291 \u2014 CVSS 9.3 CRITICAL\n\nOmni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93291\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-24T22:07:49.660389Z"}, {"uuid": "1c0568ab-d029-4286-b563-48475b9d586a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93291", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwcqbnouvb2u", "content": "Critical Eufy robot vacuum vulnerabilities expose the Omni C20 and X10 Pro to OS command injection. Patch CVE-2026-93289 and CVE-2026-93291 immediately.\n\n#Eufy #CVE202693289 #CVE202693291 #IoT #Cybersecurity #Vulnerability", "creation_timestamp": "2026-09-25T02:34:47.675048Z"}, {"uuid": "fb31b24e-a389-4598-b795-b7d30a6ffa85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93291", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117329443213660434", "content": "CVE-2026-93291 (CRITICAL): Eufy Omni C20 (<1.6.4) fails certificate validation, exposing devices to MITM and arbitrary code execution. Patch status unknown \u2014 use strong network protections. https://radar.offseq.com/threat/cve-2026-93291-cwe-295-improper-certificate-validation-in-eufy-omni-c20-63bb60225f0bad8d #OffSeq #CVE202693291 #IoTSecurity #Vuln #Infosec", "creation_timestamp": "2026-09-25T03:00:26.830549Z"}, {"uuid": "9a684294-3ee1-45bd-a24e-a91516f690a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93291", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwcrpku4cn22", "content": "Eufy Omni C20 (<1.6.4) has a CRITICAL cert validation flaw (CVE-2026-93291). MITM risk & code execution possible. Patch status unconfirmed \u2014 review vendor updates. \ud83d\udd10 https://radar.offseq.com/threat/cve-2026-93291-cwe-295-improper-certificate-validation-in-eufy-omni-c20-63bb60225f0bad8d #OffSeq #I...", "creation_timestamp": "2026-09-25T03:00:27.557476Z"}]}