High severity · published Mar 3, 2026
CVE-2026-1876
Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series Ethernet module
7.5
CVSS
0.4%
EPSS
No
On KEV
Description
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a denial-of-service (DoS) condition on the products by continuously sending UDP packets to the products. A system reset of the product is required for recovery.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MI
MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP · Mitsubishi Electric Corporation
All versions · source: vendor
MI
Melsec Iq-f Fx5-enet/ip Firmware · Mitsubishielectric
All versions, or not specified · source: NVD
In the news
VulnerabilityHigh
Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet module
View CSAF
Summary
Successful exploitation of these vulnerabilities could allow a remote attacker to cause a denial-of-service condition by continuously sending UDP packets to the affected products.
The following versions of Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet module are affected:
MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP <=1.106, vers:all/* (CVE-2026-1874, CVE-2026-1876)
MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP vers:all/* (CVE-2026-1874, CVE-2026-1875)
CVSS
Vendor
Equipment
Vulnerabilities
v3 7.5
Mitsubishi Electric
Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet module
Always-Incorrect Control Flow Implementation, Improper Resource Shutdown or Release
Background
Critical Infrastructure Sectors: Critical Manufacturing
Countries/Areas Deployed: Worldwide
Company Headquarters Location: Japan
Vulnerabilities
Expand All +
CVE-2026-1874
An always-incorrect control flow implementation vulnerability may allow a remote attacker to cause a denial-of-service condition by continuously sending UDP packets to the affected products.
View CVE Details
Affected Products
Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet module
Vendor: Mitsubishi Electric
Product Version: Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP: <=1.106, Mitsubis...
Mar 3, 2026·CISA Advisories
Affected product
MI
MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP
Mitsubishi Electric Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-1876
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-1876
Third Party Advisory
https://jvn.jp/vu/JVNVU93286687/
Third Party Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-26-62-01
Vendor Advisory
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-021_en.pdf
More from MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP
7.5
CVE-2026-1874
Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP module and Ethernet module
7.5
CVE-2025-3511
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter…