11
CVEs
9
Critical
2
High
0
KEV
1
PoC
2
Unpatched C/H
81.8%
Patch Rate
1.1%
Avg EPSS
Severity Breakdown
CRITICAL
9
HIGH
2
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (8)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-82908 | Integer overflow in MSI Dragon Center's NTIOLib_X64.sys kernel-mode driver (versions up to 2.0.155.0) allows local low-privileged users to corrupt kernel memory via crafted count or elementSize arguments passed to the MmioWritePath MMIO Write Path Handler. Exploitation can yield full SYSTEM-level privilege escalation on the target host. A public proof-of-concept is available, the vendor did not respond to coordinated disclosure, and no official patch has been released. | HIGH | 8.5 | 0.1% | 63 |
PoC
No patch
|
| CVE-2026-71986 | OS command injection in the MSI Radix AXE6600 tri-band Wi-Fi 6E gaming router (firmware v781521) lets attackers reach the device's dmz configuration function, inject shell metacharacters, and execute arbitrary commands as root on the underlying Linux system. The flaw was reported by VulnCheck and carries a vendor CVSS 4.0 base score of 9.3 (VC:H/VI:H/VA:H), reflecting complete compromise of confidentiality, integrity, and availability. No public exploit identified at time of analysis, and the CVE is not listed in CISA KEV, but a vendor firmware update is available. | CRITICAL | 9.3 | 1.4% | 48 |
|
| CVE-2026-71987 | OS command injection in the MSI Radix AXE6600 WiFi 6E gaming router (firmware v781521) allows remote attackers to inject and execute arbitrary shell commands via the router's 'alg' (application-layer gateway) function, yielding full root privileges on the device. The CVSS 4.0 base score is 9.3 (Critical) with a fully remote, unauthenticated, low-complexity vector, and a vendor patch is available; however, no public exploit code or CISA KEV listing has been identified at time of analysis. | CRITICAL | 9.3 | 1.4% | 48 |
|
| CVE-2026-71988 | Remote command injection in the MSI Radix AXE6600 Wi-Fi 6E gaming router (firmware v781521) lets remote attackers run arbitrary OS commands as root by abusing the portFw port-forwarding function, reachable through the alg handler. The flaw was reported by VulnCheck and carries a critical CVSS 4.0 base score of 9.3; no public exploit identified at time of analysis and it is not listed in CISA KEV. A vendor patch is available per the MSI support advisory. | CRITICAL | 9.3 | 1.4% | 48 |
|
| CVE-2026-71989 | Remote code execution in the MSI Radix AXE6600 Wi-Fi 6E gaming router (firmware v781521) lets unauthenticated network attackers inject arbitrary OS commands via the porTrigger function, reachable through the alg function, and obtain root on the device. The CVSS 4.0 base score is 9.3 (AV:N/AC:L/PR:N/UI:N with high confidentiality, integrity, and availability impact), reflecting trivial network exploitation. The flaw was reported by VulnCheck; no public exploit is identified at time of analysis and it is not listed in CISA KEV. | CRITICAL | 9.3 | 1.4% | 48 |
|
| CVE-2026-71990 | Command injection in the MSI Radix AXE6600 Wi-Fi 6E gaming router (firmware v781521) lets remote attackers inject OS commands through the TelnetSSH function that handles SSH configuration, yielding root-level control of the device. The flaw is a CWE-78 OS command injection tied to unsanitized input reaching a shell context; MSI has released a firmware fix and the issue was reported by VulnCheck. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the CVSS 4.0 base score of 9.3 reflects full compromise of the underlying system. | CRITICAL | 9.3 | 1.4% | 48 |
|
| CVE-2026-71984 | Remote command injection in the MSI Radix AXE6600 WiFi 6E gaming router (firmware v781521) lets network-reachable attackers inject arbitrary OS commands through the router's urlfilter function and gain root on the device. The flaw (CWE-78) is unauthenticated per the CVSS 4.0 vector and was reported by VulnCheck; no public exploit identified at time of analysis, though full device takeover is the demonstrated impact. A vendor patch is available per the MSI support advisory. | CRITICAL | 9.3 | 1.4% | 48 |
|
| CVE-2026-71985 | Remote command injection in the MSI Radix AXE6600 Wi-Fi 6E gaming router (firmware v781521) lets attackers reach the device's 'accesscontrol' function and run arbitrary OS commands, yielding full root control of the underlying Linux system. The published CVSS 4.0 vector (AV:N/PR:N/UI:N) indicates unauthenticated network-facing exploitation, and the flaw was reported by VulnCheck, which has published a dedicated advisory. No public exploit is identified at time of analysis, and the CVE is not listed in CISA KEV. | CRITICAL | 9.3 | 1.4% | 48 |
|
| CVE-2026-71992 | OS command injection in the MSI Radix AXE6600 Wi-Fi 6E gaming router (firmware v781521) lets remote attackers inject shell commands through the router's macfilter function and gain root on the device. The flaw was reported by VulnCheck and carries a CVSS 4.0 base score of 9.3, reflecting network-reachable, no-privilege, no-interaction exploitation with full compromise of confidentiality, integrity, and availability. No public exploit is identified at time of analysis, though the low-complexity, unauthenticated nature makes weaponization straightforward. | CRITICAL | 9.3 | 1.4% | 48 |
|
| CVE-2026-71993 | OS command injection in the MSI Radix AXE6600 Wi-Fi 6E gaming router (firmware v781521) lets remote attackers inject shell commands through router configuration functions and gain root on the device. The flaw was reported by VulnCheck, a vendor patch is available via MSI support, and no public exploit has been identified at time of analysis. The vendor CVSS 4.0 score of 9.3 reflects full compromise of confidentiality, integrity, and availability. | CRITICAL | 9.3 | 1.4% | 48 |
|
| CVE-2026-6102 | Local privilege escalation in MSI Center's bundled NTIOLib_X64.sys kernel driver lets a low-privileged user execute arbitrary code as SYSTEM by issuing commands the driver fails to properly authenticate. The flaw (ZDI-CAN-28935 / ZDI-26-430) stems from the driver not validating the origin of incoming commands, so any local process can drive its privileged I/O primitives. There is no public exploit identified at time of analysis and it is not on CISA KEV, but ZDI's disclosure and the NTIOLib family's history of abuse make weaponization plausible. | HIGH | 7.8 | 0.1% | 39 |
No patch
|