CVE-2026-71991 in Radix AXE6600
Summary
by MITRE • 08/09/2026
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the Telnet configuration interface to inject malicious commands and obtain root privileges on the underlying system.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 08/09/2026
This vulnerability represents a critical command injection flaw in the MSI Radix AXE6600 router firmware version v781521 that directly impacts the device's TelnetSSH function. The flaw stems from inadequate input validation and sanitization within the telnet configuration interface, creating an environment where malicious actors can inject arbitrary commands into the system. This vulnerability falls under CWE-77 which specifically addresses command injection flaws in software applications. The exploitation mechanism leverages the Telnet configuration interface as an attack vector, allowing remote adversaries to execute commands with root privileges on the underlying operating system.
The technical implementation of this vulnerability occurs when the TelnetSSH function fails to properly sanitize user input provided through the telnet configuration parameters. When administrators or attackers interact with the telnet interface, the system processes input without adequate filtering mechanisms that would normally prevent command concatenation or injection attacks. This creates a pathway for attackers to append malicious commands to legitimate configuration inputs, effectively bypassing normal authentication and authorization controls. The vulnerability's remote exploitability means that attackers do not require physical access or local network presence to initiate the attack, making it particularly dangerous in networked environments.
The operational impact of this vulnerability extends beyond simple privilege escalation to encompass complete system compromise and potential network infiltration. Once an attacker gains root privileges through command injection, they can manipulate all aspects of the router's functionality including network configuration, firewall rules, logging mechanisms, and even access to connected devices. This aligns with ATT&CK technique T1059 which covers command and scripting interpreter usage, allowing adversaries to execute malicious code in the context of the affected system. The compromised device can then serve as a pivot point for attacking other systems within the network or be used to establish persistent backdoors.
Mitigation strategies should focus on immediate firmware updates from MSI to address the identified vulnerability, as well as implementing network segmentation and access controls around critical networking equipment. Network administrators should disable unnecessary services such as telnet when ssh is available, and implement proper input validation at all user-facing interfaces. The vulnerability also highlights the importance of secure coding practices including parameterized inputs and privilege separation in embedded systems. Organizations should conduct regular security assessments of their network infrastructure to identify similar vulnerabilities in other router models or firmware versions that may be susceptible to command injection attacks.