CVE-2026-52200
An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API endpoint in MifiService.apk
- Score
- CVSS 3.1 9.8 Critical
- Status
- Deferred - cve@mitre.org
- Published
- 2026-07-08
- Last modified
- 2026-10-25
- Weaknesses
- CWE-94
References
- https://github.com/lamaper/UZ801-MifiService-Broken-Access-Control
- https://github.com/lamaper/CVE-2026-52200
