Which versions of MSI Radix AXE6600 are affected by CVE-2026-71986?

The MSI Radix AXE6600 Wi-Fi 6E gaming router (firmware v781521) contains a critical vulnerability enabling remote command execution at the highest system privilege level.. A patch is available.

How to fix or mitigate CVE-2026-71986?

Within 24 hours, conduct a comprehensive network inventory to identify all deployed MSI Radix AXE6600 routers and segregate any identified units from production traffic until remediation is complete. Within 7 days, obtain and apply the available vendor firmware patch from MSI to all affected devices, prioritizing internet-facing and perimeter-connected units. Within 30 days, verify patch deployment across all identified devices, analyze system logs for evidence of unauthorized access or configuration changes, and implement network-based monitoring for exploitation signatures.

MSI Radix AXE6600 CVE-2026-71986

Q: What is the CVSS score of CVE-2026-71986?

CVE-2026-71986 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 1.4%.

EUVD-2026-54829 CRITICAL

OS Command Injection (CWE-78)

2026-08-08 VulnCheck

GHSA-qjr9-9qjx-f2rr

Command Injection Radix Axe6600 Msi

9.3

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.8 HIGH

Remote low-complexity command injection to root gives C/I/A:H; PR:L rather than PR:N because the dmz function is an administrative router feature normally requiring management-interface access.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 09, 2026 - 00:01 vuln.today

CVE Published

Aug 08, 2026 - 23:24 cve.org

CRITICAL 9.3

DescriptionCVE.org

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the dmz function to execute malicious commands and obtain root privileges on the underlying system.

AnalysisAI

OS command injection in the MSI Radix AXE6600 tri-band Wi-Fi 6E gaming router (firmware v781521) lets attackers reach the device's dmz configuration function, inject shell metacharacters, and execute arbitrary commands as root on the underlying Linux system. The flaw was reported by VulnCheck and carries a vendor CVSS 4.0 base score of 9.3 (VC:H/VI:H/VA:H), reflecting complete compromise of confidentiality, integrity, and availability. No public exploit identified at time of analysis, and the CVE is not listed in CISA KEV, but a vendor firmware update is available.

Technical ContextAI

The affected component is the router's DMZ (demilitarized zone) handling routine, a configuration feature that maps inbound traffic to an internal host. The root cause is CWE-78 (Improper Neutralization of Special Elements used in an OS Command), meaning user-supplied input passed to the dmz function is concatenated into a system-level shell command without sanitization. On embedded SOHO routers this typically manifests where a web/CGI handler builds an iptables or netfilter/nvram command string from the DMZ host parameter and executes it via system()/popen(); unescaped characters such as ;, |, `, or $() break out of the intended command and run attacker-controlled binaries with the web daemon's privileges, which on these devices is root. The single affected product is identified by CPE cpe:2.3:a:msi:radix_axe6600:*:*:*:*:*:*:*:*, an MSI RadiX AXE6600 Wi-Fi 6E tri-band gaming router running firmware v781521.

RemediationAI

Apply the vendor firmware update: Patch available per MSI advisory - download and install the latest RadiX AXE6600 firmware (superseding v781521) from the MSI support page at https://us.msi.com/Networking/RadiX-AXE6600-WiFi-6E-Tri-Band-Gaming-Router/support; consult the VulnCheck advisory at https://www.vulncheck.com/advisories/msi-radix-axe6600-v781521-command-injection-via-dmz-function for confirmation of the fixed build number, which is not enumerated in the input data. Until patched, disable the DMZ feature entirely in the router settings to remove the vulnerable code path (side effect: any legitimately DMZ-hosted service will lose inbound reachability). Additionally, ensure the web administration interface is not exposed to the WAN/internet by disabling remote management and blocking inbound access to the management port from untrusted networks, and change any default administrator credentials to limit who can reach the dmz function (trade-off: remote admin convenience is lost). Restrict management-plane access to a trusted VLAN or management host where possible.