CVE-2026-53876 describes an OS command injection vulnerability in the RadiX AX6600 WiFi 6 Tri-Band Gaming Router. An authenticated administrator user accessing the web console can exploit this vulnerability to execute arbitrary operating system commands with root-level privileges. This can lead to full system compromise. The vulnerability has a CVSS 3.0 score of 7.2, indicating high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation allows an authenticated administrator to execute arbitrary OS commands as root, potentially leading to complete compromise of the router, including unauthorized control, data disclosure, and disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrator access to the web console to trusted users only and monitor for suspicious activity. Do not expose the management interface to untrusted networks.