CVE-2026-71983

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521

Description A command injection issue exists in the 'wps.cgi' endpoint. Remote attackers can execute arbitrary commands and obtain root privileges by providing malicious input through the pin2g, pin5g, or pin6g parameters. Command injection is a flaw that allows an attacker to execute arbitrary system commands on the host operating system via a vulnerable application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the pin2g, pin5g, and pin6g parameters in the 'wps.cgi' endpoint to minimize the risk of exploitation.