479153 matches found
CVE-2026-71990
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the SSH configurati...
CVE-2026-71985
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the accesscontrol function to execute...
CVE-2026-71988
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands an...
CVE-2026-19323
CVE-2026-19323 affects the generateProjectDocs function in src/index.ts of the analyze-projec component of the azer react-analyzer-mcp. The vulnerability arises from manipulation of the projectName argument, which can lead to path traversal. Exploitation is described as requiring local access. Th...
EUVD-2026-54836
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root...
OPENSUSE-SU-2026:11483-1 zpaqfranz-64.8-1.1 on GA media
These are all security issues fixed in the zpaqfranz-64.8-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11476-1 kernel-devel-7.1.7-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.1.7-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE SLES15 Security Update : azure-storage-azcopy (SUSE-SU-2026:3528-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3528-1 advisory. Update to 10.32.6. Security issues fixed: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded...
OPENSUSE-SU-2026:11475-1 kak-lsp-21.0.2-1.1 on GA media
These are all security issues fixed in the kak-lsp-21.0.2-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-71992 MSI Radix AXE6600 v781521 Command Injection via macfilter
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root...
CVE-2026-71991
Affected product: MSI Radix AXE6600 router (firmware v781521). Vulnerability: Command injection in the TelnetSSH function used for Telnet configuration, enabling remote command execution on the device. Impact: Attacker can run arbitrary commands with root privileges via the Telnet configuration i...
CVE-2026-71990 MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the SSH configurati...
CVE-2026-71989
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious command...
CVE-2026-71989 MSI Radix AXE6600 v781521 Command Injection via porTrigger function
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious command...
Exploit for CVE-2026-64638
š @Mr-LeonardoGomes š XSS2Shell-CVE-2026-64638...
CVE-2026-71986
The CVE-2026-71986 entry concerns the MSI Radix AXE6600 router, firmware v781521, with a command injection flaw in the dmz function that enables remote execution of arbitrary commands and potential root privileges on the device. The connected documents confirm the affected product and the root ca...
CVE-2026-71985
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the accesscontrol function to execute...
CVE-2026-71984
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the urlfilter function to inject malicious commands and obtain root...
CVE-2026-71958
D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a...
CVE-2026-71956
D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst field, resulting in command execution with root privileg...