Vulnerability Details CVE-2026-1874
Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP versions 1.106 and prior and Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and prior allows a remote attacker to cause a denial-of-service (DoS) condition on the products by continuously sending UDP packets to the products. A system reset of the product is required for recovery.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.8%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2026-1874
-
cpe:2.3:h:mitsubishielectric:melsec_iq-f_fx5-eip:-
-
cpe:2.3:h:mitsubishielectric:melsec_iq-f_fx5-enet/ip:-
-
cpe:2.3:o:mitsubishielectric:melsec_iq-f_fx5-eip_firmware:*
-
cpe:2.3:o:mitsubishielectric:melsec_iq-f_fx5-enet/ip_firmware:*