MI
Product
Melsec Iq-f Fx5-enet/ip Firmware
2
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
VulnerabilityHigh
Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet module
View CSAF
Summary
Successful exploitation of these vulnerabilities could allow a remote attacker to cause a denial-of-service condition by continuously sending UDP packets to the affected products.
The following versions of Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet module are affected:
MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP <=1.106, vers:all/* (CVE-2026-1874, CVE-2026-1876)
MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP vers:all/* (CVE-2026-1874, CVE-2026-1875)
CVSS
Vendor
Equipment
Vulnerabilities
v3 7.5
Mitsubishi Electric
Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet module
Always-Incorrect Control Flow Implementation, Improper Resource Shutdown or Release
Background
Critical Infrastructure Sectors: Critical Manufacturing
Countries/Areas Deployed: Worldwide
Company Headquarters Location: Japan
Vulnerabilities
Expand All +
CVE-2026-1874
An always-incorrect control flow implementation vulnerability may allow a remote attacker to cause a denial-of-service condition by continuously sending UDP packets to the affected products.
View CVE Details
Affected Products
Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet module
Vendor: Mitsubishi Electric
Product Version: Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP: <=1.106, Mitsubis...
Mar 3, 2026·CISA Advisories
