CVE-2026-71990

criticalCVSS 9.8covered by 1 sourcefirst seen 2026-08-09

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the SSH configuration interface to inject malicious commands and obtain root privileges on the underlying system.

⚡ Watch CVE-2026-71990

Get an email if CVE-2026-71990 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Moderate exploitation risk1.4% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 69% of all EPSS-scored CVEs.

Advisory coverage (1)

criticalCVE-2026-71990: MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability i…nvd · 2026-08-09

External references

NVD record for CVE-2026-71990

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-71990 status](https://www.csirts.com/badge/CVE-2026-71990)](https://www.csirts.com/cve/CVE-2026-71990)