Which versions of MSI Radix AXE6600 are affected by CVE-2026-71993?

A critical command injection flaw in MSI Radix AXE6600 Wi-Fi 6E routers (firmware v781521) enables remote root access through configuration functions, with no public exploit identified at time of…. A patch is available.

How to fix or mitigate CVE-2026-71993?

Within 24 hours, inventory all MSI Radix AXE6600 units running firmware v781521 and isolate them from critical network segments pending patch application. Within 7 days, retrieve and deploy the vendor-released patch available through MSI support channels to all identified devices, prioritizing edge and perimeter routers. Within 30 days, verify patch deployment across all affected devices, implement post-patch scanning for configuration tampering, and review authentication and system logs for evidence of exploitation attempts.

MSI Radix AXE6600 CVE-2026-71993

Q: What is the CVSS score of CVE-2026-71993?

CVE-2026-71993 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 1.4%.

EUVD-2026-54836 CRITICAL

OS Command Injection (CWE-78)

2026-08-09 VulnCheck

GHSA-fcgq-7m73-rv6c

Command Injection Radix Axe6600 Msi

9.3

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.8 HIGH

openvpn and macfilter are administrative config handlers, so authenticated admin-panel access is realistically needed (PR:L); network-reachable low-complexity injection yields root, giving full C/I/A impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 09, 2026 - 00:26 vuln.today

CVE Published

Aug 09, 2026 - 00:00 cve.org

CRITICAL 9.3

DescriptionCVE.org

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root privileges on the underlying system.

AnalysisAI

OS command injection in the MSI Radix AXE6600 Wi-Fi 6E gaming router (firmware v781521) lets remote attackers inject shell commands through router configuration functions and gain root on the device. The flaw was reported by VulnCheck, a vendor patch is available via MSI support, and no public exploit has been identified at time of analysis. The vendor CVSS 4.0 score of 9.3 reflects full compromise of confidentiality, integrity, and availability.

Technical ContextAI

The affected product is a consumer/prosumer tri-band gaming router running MSI's Radix firmware, whose web management interface exposes VPN and access-control configuration handlers. The vulnerability is classified as CWE-78 (Improper Neutralization of Special Elements used in an OS Command), meaning user-supplied input is passed into a shell command without adequate sanitization. On embedded Linux routers these configuration handlers (here the openvpn and macfilter functions) typically execute as root, so injected metacharacters (e.g. ;, |, `, $()) run with full system privileges. The single affected product is identified by CPE cpe:2.3:a:msi:radix_axe6600:*:*:*:*:*:*:*:*, with the vulnerable build being firmware v781521.

RemediationAI

Apply the vendor firmware update: a patch is available per the MSI advisory, though an exact fixed version number is not provided in the available data - obtain the latest firmware from the MSI Radix AXE6600 support page (https://us.msi.com/Networking/RadiX-AXE6600-WiFi-6E-Tri-Band-Gaming-Router/support) and verify the build post-flash. Until patched, restrict access to the router's management interface by ensuring remote/WAN administration is disabled so the admin panel is not internet-reachable (trade-off: no off-network management), limit LAN access to the admin UI to trusted hosts, and change any default administrator credentials to reduce the chance of an attacker reaching the openvpn/macfilter configuration handlers. Avoid exposing the OpenVPN server configuration to untrusted users. Consult the VulnCheck advisory (https://www.vulncheck.com/advisories/msi-radix-axe6600-v781521-command-injection-via-openvpn-function) for specific affected-function details.