CVE-2026-71993: MSI Radix AXE6600 v781521 Command Injection via openvpn function
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root privileges on the underlying system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-71993?
The severity of CVE-2026-71993 is rated as critical with a score of 9.8.
How do I fix CVE-2026-71993?
To fix CVE-2026-71993, you should update the MSI Radix AXE6600 router firmware to the latest version that addresses this vulnerability.
What is the impact of CVE-2026-71993?
CVE-2026-71993 allows remote attackers to execute arbitrary commands on the router, potentially gaining root privileges.
Which devices are affected by CVE-2026-71993?
CVE-2026-71993 affects the MSI Radix AXE6600 router running firmware version v781521.
What type of vulnerability is CVE-2026-71993 classified as?
CVE-2026-71993 is classified as an OS Command Injection vulnerability.