Eufy vulnerabilities
We track 3 vulnerabilities in Eufy products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2026.
Latest Eufy vulnerabilities
- 9.4 Critical severity
Omni C20: Improper Certificate Validation
Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code.
- 7.5 High severity
Omni C20: Improper Neutralization of Special Elements used in an OS Command
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.
- 8.2 High severity
Homebase 2 Firmware: Insufficient Entropy
The Eufy Homebase 2 before firmware version 3.3.4.1h creates a dedicated wireless network for its ecosystem, which serves as a proxy to the end user's primary network. The WPA2-PSK generation of this dedicated network is flawed and solely based on the serial n