CVE Catalog
CVE-2026-93291
CriticalCVSS 9.4Summary
Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code.
Risk Assessment
A man-in-the-middle attacker can intercept communications and execute arbitrary code on the system.
Recommendation
Update Omni C20 software to a version with fixed certificate validation or apply compensating controls such as certificate pinning.
Other vulnerabilities in Omni C20
Original NVD description (English source)
Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code.