CVE-2026-71993

criticalCVSS 9.8covered by 1 sourcefirst seen 2026-08-09

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root privileges on the underlying system.

⚡ Watch CVE-2026-71993

Get an email if CVE-2026-71993 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Moderate exploitation risk1.4% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 69% of all EPSS-scored CVEs.

Advisory coverage (1)

criticalCVE-2026-71993: MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability i…nvd · 2026-08-09

External references

NVD record for CVE-2026-71993

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-71993 status](https://www.csirts.com/badge/CVE-2026-71993)](https://www.csirts.com/cve/CVE-2026-71993)