Will Eufy Omni C20/X10 Pro CVEs be actively exploited by end of October 2026?

Eufy Omni C20 (<1.6.4) and Omni X10 Pro (<1.6.4) contain three critical vulnerabilities (CVE-2026-93289, CVE-2026-93290, CVE-2026-93291) allowing system-level command execution and arbitrary code execution. CISA Alerts advisory issued September 2026. Fixed in v1.6.4. Primary question: will public PoC or active exploitation emerge before patching becomes widespread?

Resolution Criteria

YES if: (1) Public PoC exploit is published on GitHub, Exploit-DB, or similar; OR (2) Threat intelligence or CISA advisory documents active exploitation in the wild by unpatched devices. NO if: no public PoC or exploitation reports by deadline, or CISA removes/downgrades the alert.