Ghostwire

CVE-2026-71983: MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface...

CRITICAL CVSS 9.8 Exploit Available

Published: August 8, 2026 | Last Modified: August 8, 2026

Description

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized parameters to execute arbitrary commands on the affected device and obtain root privileges.

Ghostwire Analysis — What This Means Practically

Critical CVSS score indicates maximum severity — remote code execution, authentication bypass, or complete system compromise is likely possible.
Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

CVE-2026-71983: MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface...

Description

Ghostwire Analysis — What This Means Practically

References