Skip to content
Threat Feed
Subscribe

Vendor

MSI

2 briefs RSS
critical advisory

Command Injection in MSI Radix AXE6600 Router

The MSI Radix AXE6600 router firmware version v781521 is vulnerable to remote command injection via the wps.cgi interface, allowing unauthenticated attackers to execute arbitrary commands with root privileges.

Radix AXE6600
1r 3t 11c
high advisory

CVE-2026-57851 — MSI Feature Manager Kernel Driver Local Privilege Escalation

A local privilege escalation vulnerability (CVE-2026-57851) exists in the MSI Feature Manager's KernCoreLib64.sys kernel driver that allows any local user to perform arbitrary physical memory read/write and unrestricted I/O port operations by accessing exposed IOCTL handlers without requiring administrator privileges, enabling manipulation of kernel objects, tampering with kernel-mode callbacks, bypassing Protected Process Light, and disabling security software.

MSI Feature Manager privilege-escalation vulnerability windows driver-vulnerability
1t 1c