CVE-2026-53876

Severity: high (CVSS 8.6 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-17 · updated 2026-10-26
Weakness: CWE-78

Description

RadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who logs in to the web console as an administrator.

Affected products

Micro-Star International Co., Ltd. RadiX AX6600 WiFi 6 Tri-Band Gaming Router: firmware versions prior to v781521

References

https://jvn.jp/en/jp/JVN20769211/
https://www.msi.com/Networking/RadiX-AX6600-WiFi-6-Tri-Band-Gaming-Router/support

Get alerted when CVE-2026-53876 or the next vulnerability affects your stack