CVE-2026-71991: MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the Telnet configuration interface to inject malicious commands and obtain root privileges on the underlying system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-71991?
CVE-2026-71991 has a severity rating of critical with a score of 9.8.
How do I fix CVE-2026-71991?
To fix CVE-2026-71991, update the firmware of the MSI Radix AXE6600 router to the latest version provided by MSI.
What type of vulnerability is CVE-2026-71991?
CVE-2026-71991 is categorized as an OS Command Injection vulnerability.
Can CVE-2026-71991 allow remote attackers to execute commands?
Yes, CVE-2026-71991 allows remote attackers to execute arbitrary commands on the affected device.
What component of the MSI Radix AXE6600 is affected by CVE-2026-71991?
CVE-2026-71991 affects the TelnetSSH function used for Telnet configuration in the MSI Radix AXE6600 router.