CVE-2026-71990: MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the SSH configuration interface to inject malicious commands and obtain root privileges on the underlying system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-71990?
CVE-2026-71990 has a critical severity score of 9.8.
How do I fix CVE-2026-71990?
To fix CVE-2026-71990, update the MSI Radix AXE6600 firmware to the latest version provided by MSI.
What type of vulnerability is CVE-2026-71990?
CVE-2026-71990 is a command injection vulnerability affecting the TelnetSSH function of the MSI Radix AXE6600 router.
Who can exploit CVE-2026-71990?
CVE-2026-71990 can be exploited by remote attackers who can access the affected device's SSH configuration.
What are the potential impacts of CVE-2026-71990?
The potential impacts of CVE-2026-71990 include unauthorized execution of arbitrary commands on the router, which could compromise its security.