CRITICALVulnerability

CVE-2026-71993

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root privileges on the underlying system.

Properties

severity
CRITICAL
score
9.8
cve_id
CVE-2026-71993
vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
published_at
2026-08-09T00:16:48.550
last_modified
2026-08-31T20:30:14.457

Related Entities (2)

DESCRIBED_BY (1)

[Source]NVD

HAS_WEAKNESS (1)

[Weakness]Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-71993 — Ninja Signal Threat Intelligence | Ninja Signal