MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to… (CVE-2026-71993) Radar - Latest Security Threats / 11h MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root privi

The MSI Radix AXE6600 router firmware version v781521 contains a critical command injection vulnerability in its openvpn function. This flaw allows remote attackers to execute arbitrary commands on the device by exploiting the macfilter function, potentially gaining root privileges. The vulnerability is identified as CVE-2026-71993 and has a CVSS score of 9.8, indicating a high severity with network attack vector, no required privileges or user interaction, and full impact on confidentiality, integrity, and availability.

CVE-2026-71993 is a command injection vulnerability in the openvpn function of MSI Radix AXE6600 router firmware version v781521. Attackers can leverage the macfilter function to inject malicious commands remotely, resulting in arbitrary command execution with root privileges on the underlying system. The vulnerability is classified under CWE-78 (Improper Neutralization of Special Elements used in an OS Command). No patch or remediation information is currently available, and no known exploits in the wild have been reported.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected router with root privileges, leading to complete compromise of the device. This can result in full control over the router, including potential interception or manipulation of network traffic, disruption of service, and unauthorized access to internal networks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the router's management interfaces from untrusted networks and monitor for unusual activity related to the openvpn and macfilter functions.

The MSI Radix AXE6600 router firmware version v781521 contains a critical command injection vulnerability in its openvpn function. This flaw allows remote attackers to execute arbitrary commands on the device by exploiting the macfilter function, potentially gaining root privileges. The vulnerability is identified as CVE-2026-71993 and has a CVSS score of 9.8, indicating a high severity with network attack vector, no required privileges or user interaction, and full impact on confidentiality, integrity, and availability.

Machine-generated threat intelligence

CVE-2026-71993 is a command injection vulnerability in the openvpn function of MSI Radix AXE6600 router firmware version v781521. Attackers can leverage the macfilter function to inject malicious commands remotely, resulting in arbitrary command execution with root privileges on the underlying system. The vulnerability is classified under CWE-78 (Improper Neutralization of Special Elements used in an OS Command). No patch or remediation information is currently available, and no known exploits in the wild have been reported.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected router with root privileges, leading to complete compromise of the device. This can result in full control over the router, including potential interception or manipulation of network traffic, disruption of service, and unauthorized access to internal networks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the router's management interfaces from untrusted networks and monitor for unusual activity related to the openvpn and macfilter functions.

Threat ID: 6a7891d2bf8831d539c8696d

Added to database: 08/09/2026, 14:42:26 UTC

Last enriched: 08/09/2026, 14:48:50 UTC

Last updated: 08/10/2026, 00:41:18 UTC

Crowdsource mitigation strategies, intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Instant breach scanning across billions of leaked records. Free tier available.