CVE-2026-71984: Improper Neutralization of Special Elements used in an OS Command

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the urlfilter function to inject malicious commands and obtain root...

PT-2026-69237

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description A command injection issue exists in the porTrigger function. Remote attackers can exploit this through the alg function to execute arbitrary commands and obtain root privileges on the underlying...

PT-2026-69233

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description A command injection issue exists in the accesscontrol function. This allows remote attackers to execute arbitrary commands on the device and obtain root privileges on the underlying system...

CVE-2026-71985: Improper Neutralization of Special Elements used in an OS Command

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the accesscontrol function to execute...

PT-2026-69231

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description A command injection issue exists in the 'wps.cgi' endpoint. Remote attackers can execute arbitrary commands and obtain root privileges by providing malicious input through the pin2g, pin5g, or pin6...

PT-2026-69232

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description A command injection issue exists in the urlfilter function. This allows remote attackers to inject and execute arbitrary commands on the device, potentially granting them root privileges on the...

CVE-2026-71992: Improper Neutralization of Special Elements used in an OS Command

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root...

CVE-2026-71989: Improper Neutralization of Special Elements used in an OS Command

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious command...

CVE-2026-71986: Improper Neutralization of Special Elements used in an OS Command

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the dmz function to execute malicious commands and...

CVE-2026-71991: Improper Neutralization of Special Elements used in an OS Command

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the Telnet...

PT-2026-69239

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description Remote attackers can execute arbitrary commands and obtain root privileges on the underlying system through the Telnet configuration interface. The issue exists in the TelnetSSH function used for...

CVE-2026-71983: Improper Neutralization of Special Elements used in an OS Command

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized...

CVE-2026-71988: Improper Neutralization of Special Elements used in an OS Command

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands an...

PT-2026-69234

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description A command injection issue exists in the dmz function. This allows remote attackers to execute arbitrary commands on the device and obtain root privileges on the underlying system. Recommendations A...

CVE-2026-71987: Improper Neutralization of Special Elements used in an OS Command

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands and...

PT-2026-69236

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description Remote attackers can execute arbitrary commands and obtain root privileges on the underlying system. This is possible through the alg function, which triggers a command injection within the portFw...

PT-2026-69238

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description A command injection issue exists in the TelnetSSH function used for SSH configuration. Remote attackers can exploit the SSH configuration interface to inject malicious commands, allowing them to...

CVE-2026-71990: Improper Neutralization of Special Elements used in an OS Command

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the SSH configurati...

PT-2026-69241

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description Remote attackers can execute arbitrary commands and obtain root privileges on the underlying system by exploiting a command injection flaw in the macfilter function. Command injection is a security...

PT-2026-69235

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description A command injection issue exists in the alg function. This allows remote attackers to execute arbitrary commands on the device and obtain root privileges on the underlying system. Recommendations A...