Mitsubishi Electric vulnerabilities and fixes

CVEs that mention Mitsubishi Electric, ranked by priority. 5 tracked.

Mitsubishi Electric has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-10-15. Highest priority: CVE-2026-8805 (score 48/100).

• CVE-2026-8805 HIGH 8.7 Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Electric MELSEC iQ-F Se
• CVE-2026-8806 HIGH 8.7 Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Modul
• CVE-2026-16436 CRITICAL 9.2 Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions
• CVE-2026-16438 CRITICAL 9.4 Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICON
• CVE-2026-16437 HIGH 7.1 Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions

FAQ

How do I fix Mitsubishi Electric vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Mitsubishi Electric being exploited right now?

None of the tracked Mitsubishi Electric CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Mitsubishi Electric CVE should I patch first?

CVE-2026-8805 currently ranks highest (48/100): Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Electric MELSEC iQ-F Se.

RSS feed for Mitsubishi Electric · ← Back to latest CVEs