CVE-2026-52200

An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API endpoint in MifiService.apk...

CVE-2026-52200

The Generic OEM UZ801_v2.1 4G LTE Router (specifically firmware V3.4.3 ) is vulnerable to a broken access control issue in the MifiService.apk component. The /ajax web management API endpoint fails to enforce authenticated server-side sessions, CSRF protection, or Origin/Referer validation. This ...