Shark vacuums can potentially expose millions of customers' data. A security researcher has explained how that is possible.