CVE-2026-71984: MSI Radix AXE6600 v781521 Command Injection via urlfilter

Published Aug 8, 2026

Updated

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the urlfilter function to inject malicious commands and obtain root privileges on the underlying system.

Affected Software

1 affected component

MSI Radix AXE6600 router firmware=v781521

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade MSI Radix AXE6600 router firmware to a version that resolves this vulnerability.
Fixed in v781521

Event History

Aug 8, 2026

CVE Published

via MITRE·11:16 PM

Data Sourced

via MITRE·11:16 PM

DescriptionSeverityWeakness

Aug 9, 2026

Data Sourced

via NVD·12:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-71984?

The severity of CVE-2026-71984 is critical with a score of 9.8.

How do I fix CVE-2026-71984?

To fix CVE-2026-71984, update the MSI Radix AXE6600 router firmware to a version that addresses this vulnerability.

What is the impact of CVE-2026-71984 if exploited?

If exploited, CVE-2026-71984 allows remote attackers to execute arbitrary commands on the affected MSI Radix AXE6600 router.

Which devices are affected by CVE-2026-71984?

CVE-2026-71984 affects the MSI Radix AXE6600 router running firmware version v781521.

What type of vulnerability is CVE-2026-71984?

CVE-2026-71984 is an OS Command Injection vulnerability found in the urlfilter function.