CVE-2026-52200

UZ801 / ES-U3TS MifiService 访问控制失效漏洞 本仓库用于公开披露 OEM / 白牌 UZ801v2.1 4G LTE 随身 Wi-Fi 平台中 MifiService.apk 管理接口的访问控制缺陷，并为 CVE 申请提供可公开引用的材料。 当前样机还观察到以 ES-U3TS 形式售卖的同源产品，因此本文使用 UZ801 / ES-U3TS 作为公开命名。 摘要 受影响设备在本地管理地址上暴露了 Jetty Web API： http://192.168.100.1/ajax 后端请求分发核心位于：...

CVE-2026-52199

CVE-2026-52199：UZ801 4G 路由器中的未认证远程代码执行漏洞 漏洞摘要 Generic OEM UZ801v2.1 4G LTE 路由器（固件 V3.4.3） 中存在一个严重的不正确的访问控制 漏洞。该设备错误地将一个未认证的安卓调试桥（ADB）守护进程（/sbin/adbd）暴露在 TCP 端口 7628 上，供相邻网络（局域网/无线网络）访问。 连接到设备本地网络的攻击者可以利用此缺陷绕过所有认证机制，建立 ADB 连接，并以 root 权限执行任意代码。 受影响产品 厂商： Generic OEM / 白标生态 产品： UZ801v2.1 4G LTE 路由器...

CVE-2026-52199

An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd component...

CVE-2026-52199

The Generic OEM UZ801_v2.1 4G LTE Router (Firmware V3.4.3) is vulnerable to a critical improper access control issue in the /sbin/adbd component. The device incorrectly exposes an unauthenticated Android Debug Bridge (ADB) daemon on TCP port 7628 to the local network (LAN/WiFi). An attacker on th...

CVE-2026-52199

An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd component...

PT-2026-60854

Name of the Vulnerable Software and Affected Versions Generic OEM UZ801 v2.1 4G LTE Router version 3.4.3 Description A remote attacker can execute arbitrary code through the sbin/adbd component. Recommendations At the moment, there is no information about a newer version that contains a fix for...

CVE-2026-52199

An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd component...

EUVD-2026-42504

An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API endpoint in MifiService.apk...

CVE-2026-52200

An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API endpoint in MifiService.apk...

CVE-2026-52200

An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API endpoint in MifiService.apk...

CVE-2026-52200

The Generic OEM UZ801_v2.1 4G LTE Router (specifically firmware V3.4.3 ) is vulnerable to a broken access control issue in the MifiService.apk component. The /ajax web management API endpoint fails to enforce authenticated server-side sessions, CSRF protection, or Origin/Referer validation. This ...

PT-2026-56623

Name of the Vulnerable Software and Affected Versions Generic OEM UZ801 v2.1 4G LTE Router version 3.4.3 Description A remote attacker can execute arbitrary code through the /ajax web management API endpoint located within the MifiService.apk component. Recommendations At the moment, there is no...

CVE-2026-52200

An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API endpoint in MifiService.apk...