Which versions of MSI Radix AXE6600 are affected by CVE-2026-71989?

The MSI Radix AXE6600 Wi-Fi 6E gaming router contains a critical unauthenticated remote code execution vulnerability (CVSS 9.3) allowing attackers to gain root-level device access without…. A patch is available.

How to fix or mitigate CVE-2026-71989?

Within 24 hours, inventory all MSI Radix AXE6600 Wi-Fi 6E routers running firmware v781521 or earlier and isolate those handling sensitive network traffic from critical systems. Within 7 days, apply the vendor-released patch from MSI to all affected Radix AXE6600 devices, prioritizing production network segments and devices with access to confidential data. Within 30 days, complete a full audit of wireless infrastructure inventory to verify patch deployment across all devices and establish a monthly firmware update schedule for all network equipment.

MSI Radix AXE6600 CVE-2026-71989

Q: What is the CVSS score of CVE-2026-71989?

CVE-2026-71989 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 1.4%.

EUVD-2026-54832 CRITICAL

OS Command Injection (CWE-78)

2026-08-08 VulnCheck

GHSA-x5vj-fm3x-hr65

Command Injection Radix Axe6600 Msi

9.3

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.8 CRITICAL

Unauthenticated network command injection (PR:N/UI:N/AC:L) yielding root gives full C/I/A impact; scope unchanged as the OS is the vulnerable component itself.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 09, 2026 - 00:02 vuln.today

CVE Published

Aug 08, 2026 - 23:33 cve.org

CRITICAL 9.3

DescriptionCVE.org

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands and obtain root privileges on the underlying system.

AnalysisAI

Remote code execution in the MSI Radix AXE6600 Wi-Fi 6E gaming router (firmware v781521) lets unauthenticated network attackers inject arbitrary OS commands via the porTrigger function, reachable through the alg function, and obtain root on the device. The CVSS 4.0 base score is 9.3 (AV:N/AC:L/PR:N/UI:N with high confidentiality, integrity, and availability impact), reflecting trivial network exploitation. The flaw was reported by VulnCheck; no public exploit is identified at time of analysis and it is not listed in CISA KEV.

Technical ContextAI

The affected component is the firmware of an MSI Radix AXE6600 consumer/prosumer tri-band router, specifically the web/management backend handling port-triggering (porTrigger) and application-layer gateway (alg) functionality. CWE-78 (Improper Neutralization of Special Elements used in an OS Command) is the root cause: user-controllable input handled by the porTrigger routine is passed into a shell/system call without adequate sanitization, so shell metacharacters are interpreted rather than treated as data. Because embedded router services typically run as root, injected commands execute with full system privileges. The CPE cpe:2.3:a:msi:radix_axe6600:*:*:*:*:*:*:*:* identifies the product but does not bound versions precisely; the description pins the vulnerable build to firmware v781521.

RemediationAI

Patch available per vendor advisory: update to the fixed firmware published on the MSI Radix AXE6600 support page at https://us.msi.com/Networking/RadiX-AXE6600-WiFi-6E-Tri-Band-Gaming-Router/support (an exact fixed version number was not provided in the input and should be taken from that page); the VulnCheck advisory at https://www.vulncheck.com/advisories/msi-radix-axe6600-v781521-command-injection-via-portrigger-function documents the issue. Until patched, restrict access to the router's management/web interface so the porTrigger and alg endpoints are not reachable from the WAN or untrusted networks - disable any remote/WAN administration setting (trade-off: loses off-LAN management), and where feasible disable port triggering and ALG features that expose the vulnerable code path (trade-off: may break applications relying on dynamic port forwarding or ALG traversal). Place the device behind a segmented VLAN or upstream firewall limiting who can reach its admin services, and monitor for anomalous outbound connections indicative of post-exploit activity.