CVE-2026-52199: Improper Neutralization of Special Elements used in a Command

An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd component...

CVE-2026-52199

An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd component...

CVE-2026-52200

The Generic OEM UZ801_v2.1 4G LTE Router (specifically firmware V3.4.3 ) is vulnerable to a broken access control issue in the MifiService.apk component. The /ajax web management API endpoint fails to enforce authenticated server-side sessions, CSRF protection, or Origin/Referer validation. This ...

CVE-2026-52200: Improper Control of Generation of Code

An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API endpoint in MifiService.apk...