PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-53876 Micro-Star International Co., Ltd. CVE debrief

The RadiX AX6600 WiFi 6 Tri-Band Gaming Router is vulnerable to an OS command injection attack. This vulnerability, tracked as CVE-2026-53876, allows an administrator logged into the web console to execute arbitrary commands with root privileges. The vulnerability has a CVSS score of 8.6, indicating a high severity level. Users with access to the web console as administrators are at risk. Immediate action is required to mitigate this vulnerability.

Vendor
Micro-Star International Co., Ltd.
Product
RadiX AX6600 WiFi 6 Tri-Band Gaming Router
CVSS
HIGH 8.6
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-17
Original CVE updated
2026-06-17
Advisory published
2026-06-17
Advisory updated
2026-06-17

Who should care

Administrators and users of the RadiX AX6600 WiFi 6 Tri-Band Gaming Router, especially those with administrative access to the web console, should be aware of this vulnerability and take necessary precautions.

Technical summary

CVE-2026-53876 is an OS command injection vulnerability in the RadiX AX6600 WiFi 6 Tri-Band Gaming Router. It allows an administrator logged into the web console to execute arbitrary commands with root privileges due to improper input validation or sanitization. The vulnerability's CVSS vector is CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X, indicating a high severity level.

Defensive priority

High

Recommended defensive actions

  • Update the RadiX AX6600 WiFi 6 Tri-Band Gaming Router firmware to the latest version if available.
  • Limit access to the web console to only necessary personnel.
  • Implement strong authentication and authorization mechanisms for web console access.
  • Regularly monitor the router for suspicious activity.
  • Consider using a web application firewall to detect and prevent attacks.
  • Review and restrict the use of administrative privileges.
  • Refer to the vendor's support page for more information: [ref-5](https://www.msi.com/Networking/RadiX-AX6600-WiFi-6-Tri-Band-Gaming-Router/support).

Evidence notes

The information provided is based on data from the National Vulnerability Database (NVD) and other reliable sources. The CVE record and NVD detail pages provide further information on this vulnerability.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-53876 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-53876

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-53876 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-53876

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.