CVE-2026-71987

criticalCVSS 9.8covered by 1 sourcefirst seen 2026-08-09

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands and obtain root privileges on the underlying system.

⚡ Watch CVE-2026-71987

Get an email if CVE-2026-71987 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Moderate exploitation risk1.4% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 69% of all EPSS-scored CVEs.

Advisory coverage (1)

criticalCVE-2026-71987: MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability i…nvd · 2026-08-09

External references

NVD record for CVE-2026-71987

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-71987 status](https://www.csirts.com/badge/CVE-2026-71987)](https://www.csirts.com/cve/CVE-2026-71987)