CVE-2026-71993
CriticalCVSS 9.8Summary
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root privileges on the underlying system.
Risk Assessment
The risk for the organization includes full compromise of the router, which can lead to network traffic interception, configuration changes, and further attacks within the internal network.
Recommendation
It is recommended to immediately update the router firmware to the latest available version and restrict access to the administrative interface only from trusted networks.
Original NVD description (English source)
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root privileges on the underlying system.