Critical severity9.8NVD Advisory· Published Aug 8, 2026

CVE-2026-71983

Description

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized parameters to execute arbitrary commands on the affected device and obtain root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MSI/RadiX AXE6600llm-create
Range: = v781521

Patches

Vulnerability mechanics

References

us.msi.com/Networking/RadiX-AXE6600-WiFi-6E-Tri-Band-Gaming-Router/supportnvd
www.msi.comnvd
www.vulncheck.com/advisories/msi-radix-axe6600-v781521-command-injection-via-wps-cginvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000