Threats tagged 'ghsa-fcgq-7m73-rv6c'

The MSI Radix AXE6600 router firmware version v781521 contains a critical command injection vulnerability in its openvpn function. This flaw allows remote attackers to execute arbitrary commands on the device by exploiting the macfilter function, potentially gaining root privileges. The vulnerability is identified as CVE-2026-71993 and has a CVSS score of 9.8, indicating a high severity with network attack vector, no required privileges or user interaction, and full impact on confidentiality, integrity, and availability.