https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1876.htmlhttps://patchthecve.com/cve/CVE-2026-1876.htmlWed, 17 Jun 2026 10:16:38 +0000HIGH 7.5: Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a denial-of-service (DoS) condition on the products by continuously sending UDP packets to the products. A https://patchthecve.com/cve/CVE-2026-1875.htmlhttps://patchthecve.com/cve/CVE-2026-1875.htmlWed, 17 Jun 2026 10:16:38 +0000HIGH 7.5: Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and prior allows a remote attacker to cause a denial-of-service (DoS) condition on the products by continuously sending UDP packets to the produhttps://patchthecve.com/cve/CVE-2026-1874.htmlhttps://patchthecve.com/cve/CVE-2026-1874.htmlWed, 17 Jun 2026 10:16:38 +0000HIGH 7.5: Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP versions 1.106 and prior and Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and prior allows https://patchthecve.com/cve/CVE-2024-26314.htmlhttps://patchthecve.com/cve/CVE-2024-26314.htmlWed, 17 Jun 2026 07:17:36 +0000HIGH 7.8: Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code.https://patchthecve.com/cve/CVE-2024-25088.htmlhttps://patchthecve.com/cve/CVE-2024-25088.htmlWed, 17 Jun 2026 07:15:28 +0000HIGH 7.8: Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code.https://patchthecve.com/cve/CVE-2024-25087.htmlhttps://patchthecve.com/cve/CVE-2024-25087.htmlWed, 17 Jun 2026 07:15:28 +0000MEDIUM 5.5: Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error.https://patchthecve.com/cve/CVE-2024-25086.htmlhttps://patchthecve.com/cve/CVE-2024-25086.htmlWed, 17 Jun 2026 07:15:28 +0000HIGH 7.8: Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code.https://patchthecve.com/cve/CVE-2024-22106.htmlhttps://patchthecve.com/cve/CVE-2024-22106.htmlWed, 17 Jun 2026 07:10:43 +0000HIGH 7.8: Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service (DoS).https://patchthecve.com/cve/CVE-2024-22105.htmlhttps://patchthecve.com/cve/CVE-2024-22105.htmlWed, 17 Jun 2026 07:10:43 +0000MEDIUM 5.5: Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error.https://patchthecve.com/cve/CVE-2024-22104.htmlhttps://patchthecve.com/cve/CVE-2024-22104.htmlWed, 17 Jun 2026 07:10:43 +0000MEDIUM 5.5: Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS).https://patchthecve.com/cve/CVE-2024-22103.htmlhttps://patchthecve.com/cve/CVE-2024-22103.htmlWed, 17 Jun 2026 07:10:43 +0000MEDIUM 5.5: Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS).https://patchthecve.com/cve/CVE-2024-22102.htmlhttps://patchthecve.com/cve/CVE-2024-22102.htmlWed, 17 Jun 2026 07:10:42 +0000MEDIUM 5.5: Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error.https://patchthecve.com/cve/CVE-2023-51778.htmlhttps://patchthecve.com/cve/CVE-2023-51778.htmlWed, 17 Jun 2026 06:41:38 +0000MEDIUM 5.5: Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS).https://patchthecve.com/cve/CVE-2023-51777.htmlhttps://patchthecve.com/cve/CVE-2023-51777.htmlWed, 17 Jun 2026 06:41:38 +0000MEDIUM 5.5: Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error.https://patchthecve.com/cve/CVE-2023-51776.htmlhttps://patchthecve.com/cve/CVE-2023-51776.htmlWed, 17 Jun 2026 06:41:38 +0000HIGH 7.8: Improper privilege management in Jungo WinDriver before 12.1.0 allows local attackers to escalate privileges and execute arbitrary code.https://patchthecve.com/cve/CVE-2023-6815.htmlhttps://patchthecve.com/cve/CVE-2023-6815.htmlWed, 17 Jun 2026 06:51:28 +0000MEDIUM 6.5: Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions and MELSEC iQ-R Series SIL2 Process CPU R08/16/32/120PSFCPU all versions allows a remote authenticated attacker who has logged into the product as a non-adminhttps://patchthecve.com/cve/CVE-2023-6943.htmlhttps://patchthecve.com/cve/CVE-2023-6943.htmlWed, 17 Jun 2026 06:51:44 +0000CRITICAL 9.8: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions 1.320J and prior, GX Works2 versions 1.https://patchthecve.com/cve/CVE-2023-6942.htmlhttps://patchthecve.com/cve/CVE-2023-6942.htmlWed, 17 Jun 2026 06:51:44 +0000HIGH 7.5: Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions 1.320J and prior, GX Works2 versions 1.11M to 1.626C, GX Works3 versions 1.10https://patchthecve.com/cve/CVE-2023-6374.htmlhttps://patchthecve.com/cve/CVE-2023-6374.htmlWed, 17 Jun 2026 06:50:38 +0000MEDIUM 5.9: Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote athttps://patchthecve.com/cve/CVE-2023-5275.htmlhttps://patchthecve.com/cve/CVE-2023-5275.htmlWed, 17 Jun 2026 06:48:14 +0000LOW 2.5: Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition on the function by sending specially crafted packets. However, the attacker would need to send the packets from within the same personal computer where the funchttps://patchthecve.com/cve/CVE-2023-5274.htmlhttps://patchthecve.com/cve/CVE-2023-5274.htmlWed, 17 Jun 2026 06:48:14 +0000LOW 2.5: Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition on the function by sending specially crafted packets. However, the attacker would need to send the packets from within the same personal computer where the funchttps://patchthecve.com/cve/CVE-2023-5247.htmlhttps://patchthecve.com/cve/CVE-2023-5247.htmlWed, 17 Jun 2026 06:48:10 +0000HIGH 7.8: Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file, which could result in informahttps://patchthecve.com/cve/CVE-2023-4699.htmlhttps://patchthecve.com/cve/CVE-2023-4699.htmlWed, 17 Jun 2026 06:38:23 +0000CRITICAL 10.0: Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series, MELSEC iQ-L series, MELSEC Q series, MELSEC-L series, Mitsubishi Electric CNC M800V/M80V series, Mitsubishttps://patchthecve.com/cve/CVE-2023-4625.htmlhttps://patchthecve.com/cve/CVE-2023-4625.htmlWed, 17 Jun 2026 06:38:14 +0000MEDIUM 5.3: Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period afterhttps://patchthecve.com/cve/CVE-2023-4562.htmlhttps://patchthecve.com/cve/CVE-2023-4562.htmlWed, 17 Jun 2026 06:38:05 +0000CRITICAL 9.1: Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending illegitimhttps://patchthecve.com/cve/CVE-2023-4088.htmlhttps://patchthecve.com/cve/CVE-2023-4088.htmlWed, 17 Jun 2026 06:37:03 +0000CRITICAL 9.3: Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition, if the prohttps://patchthecve.com/cve/CVE-2023-3373.htmlhttps://patchthecve.com/cve/CVE-2023-3373.htmlWed, 17 Jun 2026 06:13:55 +0000MEDIUM 5.9: Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 and prior and GOT SIMPLE Series GS21 model versions 01.49.000 and prior allows a remote unauthenticated attacker to hijack data connections (session hijacking) ohttps://patchthecve.com/cve/CVE-2023-0525.htmlhttps://patchthecve.com/cve/CVE-2023-0525.htmlWed, 17 Jun 2026 05:25:44 +0000HIGH 7.5: Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 model versions 01.49.000 and prior, GT21 model versions 01.49.000 and prior, GOT SIMPLE Series GS25 model versions 01.49.0https://patchthecve.com/cve/CVE-2023-3346.htmlhttps://patchthecve.com/cve/CVE-2023-3346.htmlWed, 17 Jun 2026 06:13:51 +0000CRITICAL 9.8: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset ihttps://patchthecve.com/cve/CVE-2023-2063.htmlhttps://patchthecve.com/cve/CVE-2023-2063.htmlWed, 17 Jun 2026 05:51:19 +0000MEDIUM 6.3: Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to cause information disclosure, tampering, https://patchthecve.com/cve/CVE-2023-2062.htmlhttps://patchthecve.com/cve/CVE-2023-2062.htmlWed, 17 Jun 2026 05:51:18 +0000MEDIUM 6.2: Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD allows a remote unauthenticated attacker to know the password for MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP https://patchthecve.com/cve/CVE-2023-2061.htmlhttps://patchthecve.com/cve/CVE-2023-2061.htmlWed, 17 Jun 2026 05:51:18 +0000MEDIUM 6.2: Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to obtain a hard-coded password and access to the module via FTP.https://patchthecve.com/cve/CVE-2023-2060.htmlhttps://patchthecve.com/cve/CVE-2023-2060.htmlWed, 17 Jun 2026 05:51:18 +0000HIGH 7.5: Weak Password Requirements vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to access to the module via FTP by dictionary attack or password https://patchthecve.com/cve/CVE-2023-1424.htmlhttps://patchthecve.com/cve/CVE-2023-1424.htmlWed, 17 Jun 2026 05:27:55 +0000CRITICAL 10.0: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code onhttps://patchthecve.com/cve/CVE-2023-1618.htmlhttps://patchthecve.com/cve/CVE-2023-1618.htmlWed, 17 Jun 2026 05:28:22 +0000HIGH 7.5: Active Debug Code vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 Serial number 2310 **** and prior allows a remote unauthenticated attacker to bypass authentication and illegally log into the affected module by connecting to it via telnet which is hidden function and