NVD disclosure day
CVE-2026-71993
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical command injection vulnerability exists in MSI Radix AXE6600 routers, allowing unauthenticated remote attackers to execute arbitrary commands via the OpenVPN function. This could lead to root-level system access and full device control.
CVE-2026-71992
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An MSI Radix AXE6600 router firmware vulnerability allows remote attackers to execute arbitrary commands and gain root privileges by exploiting the macfilter function. This command injection flaw could lead to a complete system compromise if the affected device is accessible.
CVE-2026-71991
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A command injection vulnerability in MSI Radix AXE6600 router firmware allows remote attackers to execute arbitrary commands and gain root privileges. If the Telnet configuration interface is reachable, attackers can compromise the device, impacting network security and control.
CVE-2026-71990
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A command injection vulnerability in the MSI Radix AXE6600 router's TelnetSSH function allows remote attackers to execute arbitrary commands and gain root privileges. This issue could potentially compromise the affected devices if their management interfaces are accessible, impacting network device security and managem
CVE-2026-71989
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A command injection vulnerability exists in MSI Radix AXE6600 router firmware that allows remote attackers to execute arbitrary commands. If reachable, this could enable attackers to obtain root privileges on the affected device. This issue is relevant due to the router's role as an internet edge device.
CVE-2026-71988
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
MSI Radix AXE6600 router firmware contains a command injection vulnerability. Remote attackers can exploit this flaw to execute arbitrary commands and potentially gain root privileges on the device without authentication or user interaction. This poses a risk to device integrity and security.
CVE-2026-71987
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A command injection vulnerability exists in MSI Radix AXE6600 router firmware, allowing remote attackers to execute arbitrary commands and potentially gain root privileges. This is a concern because the vulnerability is reachable via the network, and successful exploitation could lead to full device control.
CVE-2026-71986
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
MSI Radix AXE6600 router firmware has a critical command injection vulnerability in its DMZ function, allowing unauthenticated remote attackers to execute arbitrary commands and gain root privileges. This issue, reachable via the network, impacts device control and overall network security. Organizations should identif
CVE-2026-71985
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A command injection vulnerability exists in MSI Radix AXE6600 router firmware, allowing unauthenticated remote attackers to execute arbitrary commands and gain root privileges. This affects network security at the internet edge.
CVE-2026-71984
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A command injection vulnerability exists in MSI Radix AXE6600 router firmware. This flaw allows remote attackers to execute arbitrary commands and potentially gain root privileges. As this affects a network edge device, it warrants careful consideration of potential exposure.