High severity7.5NVD Advisory· Published Mar 3, 2026· Updated May 4, 2026
CVE-2026-1874
CVE-2026-1874
Description
Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP versions 1.106 and prior and Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and prior allows a remote attacker to cause a denial-of-service (DoS) condition on the products by continuously sending UDP packets to the products. A system reset of the product is required for recovery.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:mitsubishielectric:melsec_iq-f_fx5-eip_firmware:*:*:*:*:*:*:*:*Range: <=1.000
- cpe:2.3:o:mitsubishielectric:melsec_iq-f_fx5-enet\/ip_firmware:*:*:*:*:*:*:*:*Range: <=1.106
- Range: <=1.106
Patches
Vulnerability mechanics
References
3- jvn.jp/vu/JVNVU93286687/nvdThird Party Advisory
- www.cisa.gov/news-events/ics-advisories/icsa-26-62-01nvdThird Party Advisory
- www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-021_en.pdfnvdVendor Advisory
News mentions
0No linked articles in our index yet.