CVE-2026-1874: Mitsubishielectric Melsec Iq-F FX5-Eip Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP versions 1.106 and prior and Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and prior allows a remote attacker to cause a denial-of-service (DoS) condition on the products by continuously sending UDP packets to the products. A system reset of the product is required for recovery.

Affected products

• Mitsubishielectric Melsec Iq-F FX5-Eip Firmware: up to and including 1.000
• Mitsubishielectric Melsec Iq-F FX5-Enet/ip Firmware: up to and including 1.106

Published 2026-03-03. Last modified 2026-06-17.