Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands and obtain root privileges on the underlying system.
An unauthenticated attacker over the network can execute arbitrary commands on the affected router and obtain root privileges on the underlying system.
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Patch status information not provided.
Update MSI Radix AXE6600 router firmware to a version newer than v781521 when available. Restrict network access to the router's management interfaces. Monitor for suspicious activity and command execution attempts on affected devices.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD published the first details for CVE-2026-71987
Feedly found the first article mentioning CVE-2026-71987 . See article
GitHub Advisories released a security advisory .
Critical Command Injection Vulnerabilities in MSI Radix AXE6600 Router Firmware
CVE-2026-71987 - Exploits & Severity - Feedly
MSI Radix AXE6600 Router: Critical Command Injection in `alg` Function
Collect, analyze, and vulnerability reports faster using AI
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
