CVE-2026-52199 is a remote code execution vulnerability affecting the Generic OEM UZ801_v2.1 4G LTE Router version 3.4.3. The issue arises from the sbin/adbd component, enabling unauthenticated attackers to execute arbitrary code remotely. The CVSS v3.1 base score is 9.1, indicating critical severity with network attack vector, no privileges required, no user interaction, and high confidentiality and integrity impact. The vulnerability is associated with CWE-94 (Improper Control of Generation of Code) and CWE-77 (Improper Neutralization of Special Elements used in a Command). No official patch or remediation information is currently available, and no known exploits have been reported in the wild.

Successful exploitation allows remote attackers to execute arbitrary code on the affected router without authentication, compromising confidentiality and integrity of the device. This could lead to unauthorized control over the device and potential further network compromise. Availability impact is not indicated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected device, especially to the sbin/adbd component, and monitor for suspicious activity related to this vulnerability.