7 vulnerabilities across 1 product scored HIGH or above on August 09, 2026.

  • 🟠 HIGH: 7

Exploit Status Upgrades

The following CVEs from previous bulletins have been upgraded based on new exploit intelligence:

  • [UPGRADED] CVE-2026-65507 (sergey/aiwu) — F1: exploitable → functional, AAS: 10.9 → 12.9 (HIGH → CRITICAL). Originally in 2026-08-06 bulletin.
  • [UPGRADED] CVE-2026-5430 (wso2/wso2_universal_gateway) — F1: theoretical → poc, AAS: 10.7 → 13.2 (HIGH → CRITICAL). Originally in 2026-08-06 bulletin.
  • [UPGRADED] CVE-2026-34191 (apache/apr-util) — F1: exploitable → functional, AAS: 10.5 → 13.7 (HIGH → CRITICAL). Originally in 2026-08-06 bulletin.
  • [UPGRADED] CVE-2026-28139 (wpdreams/ajax_search_lite) — F1: exploitable → functional, AAS: 10.1 → 12.1 (HIGH → CRITICAL). Originally in 2026-08-06 bulletin.
  • [UPGRADED] CVE-2025-15039 (wso2/wso2_identity_server) — F1: theoretical → itw, AAS: 9.9 → 13.9 (HIGH → CRITICAL). Originally in 2026-08-06 bulletin.
  • [UPGRADED] CVE-2026-68079 (apache/cxf) — F1: theoretical → poc, AAS: 9.6 → 12.1 (HIGH → CRITICAL). Originally in 2026-08-06 bulletin.
  • [UPGRADED] CVE-2026-70478 (flowiseai/flowise) — F1: theoretical → poc, AAS: 9.9 → 12.4 (HIGH → CRITICAL). Originally in 2026-08-04 bulletin.
  • [UPGRADED] CVE-2026-39931 (openemr/openemr) — F1: exploitable → functional, AAS: 9.1 → 11.1 (HIGH → HIGH). Originally in 2026-08-03 bulletin.
  • [UPGRADED] CVE-2026-38447 (osticket/osticket) — F1: theoretical → poc, AAS: 9.6 → 12.1 (HIGH → CRITICAL). Originally in 2026-08-03 bulletin.
  • [UPGRADED] CVE-2026-46713 (misskey-dev/misskey) — F1: theoretical → poc, AAS: 9.1 → 11.6 (HIGH → HIGH). Originally in 2026-08-03 bulletin.

🟠 [HIGH] msi/radix_axe6600

7 CVEs | CVSS 4.0: 9.3 | AAS 9.2

  • cpe:2.3:a:msi:radix_axe6600:*:*:*:*:*:*:*:*

MSI Radix AXE6600 Wi-Fi 6E tri-band gaming router firmware version v781521 is affected by seven vulnerabilities rated up to CVSS 9.3 HIGH, including multiple command injection flaws such as one in the macfilter function that allows remote attackers to execute arbitrary commands and gain root privileges on the device. Network administrators and home users running this router should treat this as a high-priority issue, as the vulnerabilities are considered exploitable and could give attackers full control of the device and the network segment it serves.

Affected organizations should check the MSI support page at us.msi.com for updated firmware for the RadiX AXE6600 and apply any available patches immediately. Until a fix is applied, restrict management interface access to trusted networks only and monitor for signs of unauthorized command execution.

Vendor Advisory