CVE-2026-71983
CriticalCVSS 9.8Summary
MSI Radix AXE6600 router firmware v781521 contains a command injection vulnerability in the wps.cgi interface. Remote attackers can inject malicious input through the pin2g, pin5g, or pin6g parameters to execute arbitrary commands on the device and gain root privileges.
Risk Assessment
An attacker can gain full control of the router, potentially leading to network traffic interception, configuration changes, or use of the device for further attacks within the network.
Recommendation
Update the router firmware to the latest version if a patch is available. Restrict access to the management interface to trusted networks only.
Original NVD description (English source)
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized parameters to execute arbitrary commands on the affected device and obtain root privileges.