Vulnerability Spotlight: Vulnerabilities in Anker Eufy Homebase could lead to code execution, authentication bypass
Summary: Cisco Talos discovered three vulnerabilities in the Anker Eufy Homebase 2, the cloud-connected video storage and networking gateway for Anker's Eufy Smarthome ecosystem. CVE-2022-21806 is a use-after-free that can lead to remote code execution via specially crafted packets, CVE-2022-26073 forces the device to reboot via crafted packets, and CVE-2022-25989 bypasses authentication via a crafted DHCP packet so traffic goes to an attacker-controlled device instead of the Homebase.
Key Takeaway: The Homebase 2 is the gateway every Eufy device connects to, so an authentication bypass that redirects traffic to an attacker-controlled device puts the whole smarthome ecosystem behind it in the path of the adversary. Talos confirmed version 2.1.8.5h is exploitable and an update is available.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-21806CVE-2022-25989CVE-2022-26073
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026