CVE-2026-52200

15th percentile - higher than 15% of all known CVEs

A vulnerability in the Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API endpoint in MifiService.apk.

An attacker can remotely take control of the router, compromising data confidentiality and integrity in the local network and potentially using the device as an entry point for further attacks.

Immediately update the router firmware to the latest version if a patch is available. If no update exists, restrict management interface access to trusted networks only and consider replacing the device with a model that has active vendor support.