What is GHSA-wj6p-gv6v-932v?

GHSA-wj6p-gv6v-932v is a security advisory published by GitHub Security Advisories with Critical severity. MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...

Which CVE IDs does GHSA-wj6p-gv6v-932v cover?

GHSA-wj6p-gv6v-932v covers the following CVE IDs: CVE-2026-71983. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wj6p-gv6v-932v?

GHSA-wj6p-gv6v-932v has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-wj6p-gv6v-932vCriticalCVSS 9.8

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...

Vendor

GitHub Security Advisories

Published

August 9, 2026

Last Modified

August 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-71983 →

📋 Description

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized parameters to execute arbitrary commands on the affected device and obtain root privileges.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-71983
https://us.msi.com/Networking/RadiX-AXE6600-WiFi-6E-Tri-Band-Gaming-Router/support
https://www.msi.com
https://www.vulncheck.com/advisories/msi-radix-axe6600-v781521-command-injection-via-wps-cgi
https://github.com/advisories/GHSA-wj6p-gv6v-932v