Is CVE-2026-53876 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-53876 being exploited in the wild.

How severe is CVE-2026-53876?

High severity, with a CVSS score of 7.2, published 17 June 2026.

Which products and versions are affected?

MSI RadiX AX6600 firmware versions prior to v781521.

Is there a fix for CVE-2026-53876?

A patch was published on 2026-06-17: Fixed in firmware version v781521 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-53876 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2026-53876?

Check whether you run MSI RadiX AX6600 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-53876: MSI RadiX AX6600 OS command injection in web console

CVE-2026-53876 · Severity: high · CVSS 7.2 · Published 2026-06-17

The MSI RadiX AX6600 gaming router contains a security flaw that allows an authenticated administrator to execute unauthorized system commands. If exploited, an attacker with administrative access to the web management console could take full control of the device with root privileges. This could lead to complete service disruption, interception of network traffic, or the use of the router as a foothold for further attacks on the local network.

Vendors: MSI.

Quick answers

Is CVE-2026-53876 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-53876 being exploited in the wild.
How severe is CVE-2026-53876?: High severity, with a CVSS score of 7.2, published 17 June 2026.
Which products and versions are affected?: MSI RadiX AX6600 firmware versions prior to v781521.
Is there a fix for CVE-2026-53876?: A patch was published on 2026-06-17: Fixed in firmware version v781521 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-53876 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2026-53876?: Check whether you run MSI RadiX AX6600 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An OS command injection vulnerability (CWE-78) exists in the web management console of the MSI RadiX AX6600 router. The flaw is located in the handling of administrative inputs, where the application fails to properly neutralize special elements used in OS commands. An attacker with network access and valid administrator credentials can exploit this to execute arbitrary commands with root-level privileges. The vulnerability is addressed in firmware version v781521 and later.

Affected products

Micro-Star International Co., Ltd. (MSI) RadiX AX6600 WiFi 6 Tri-Band Gaming Router firmware versions prior to v781521

Timeline

2026-06-17: disclosed
2026-06-17: advisory
2026-06-17: patched: Fixed in firmware version v781521

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.