CRITICAL

CVE-2026-71989

CVSS v3

9.8

CRITICAL

EPSS Score

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands and obtain root privileges on the underlying system.

Technical details

CVSS v3 Vector
3.1
Published
8/9/2026
Last Modified
8/9/2026

Frequently asked questions

What is CVE-2026-71989?

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands and obtain root privileges on the underlying system.

Is CVE-2026-71989 actively exploited?

Active exploitation of CVE-2026-71989 has not been confirmed. The EPSS score is N/A%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2026-71989?

CVE-2026-71989 has a CVSS v3 base score of 9.8 (CRITICAL severity), with vector string 3.1.

Is CVE-2026-71989 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.