Is CVE-2026-13584 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-13584

Apply the update provided by Mitsubishi Electric (Update A) to all affected products. Additionally, implement network segmentation to isolate control system networks from untrusted networks, restrict physical and logical access to the network segment, and monitor for anomalous traffic patterns.

Quick answers

What is CVE-2026-13584?: Apply the update provided by Mitsubishi Electric (Update A) to all affected products. Additionally, implement network segmentation to isolate control system networks from untrusted networks, restrict physical and logical access to the network segment, and monitor for anomalous traffic patterns.
How severe is CVE-2026-13584?: high
Is CVE-2026-13584 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-13584 be mitigated?: Apply the update provided by Mitsubishi Electric (Update A) to all affected products. Additionally, implement network segmentation to isolate control system networks from untrusted networks, restrict physical and logical access to the network segment, and monitor for anomalous traffic patterns.

CVSS

—

Vendor

Mitsubishi Electric

Published

Sep 30, 2026 · 08:43

Patch

Unknown / not confirmed

Affected products

MELSEC MX Controller MXR300-16, MELSEC MX Controller MXR300-32, MELSEC MX Controller MXR300-64, MELSEC MX Controller MXR500-128, MELSEC MX Controller MXR500-256, MELSEC MX-F Controller MXF100-8-N32, MELSEC MX-F Controller MXF100-8-P32, MELSEC MX-F Controller MXF100-16-N32, MELSEC MX-F Controller MXF100-16-P32, MELSEC MX-F Controller MXF100S-N32, MELSEC MX-F Controller MXF100S-P32, MELSEC MX-F Controller MXF100S-8-N32, MELSEC MX-F Controller MXF100S-8-P32, MELSEC MX-F Controller MXF100S-16-N32, MELSEC MX-F Controller MXF100S-16-P32, Master/local module RJ71GN11-T2, Master/local module RJ71GN11-SX, Master/local module RJ71GN11-EIP, Master/local module FX5-CCLGN-MS, CC-Link IE TSN interface board NZ81GN11-SX, CC-Link IE TSN interface board NZ81GN11-T2, Motion module RD78G4, Motion module RD78G8, Motion module RD78G16, Motion module RD78G64, Motion module RD78GHV, Motion module RD78GHW, Motion module FX5-40SSC-G, Motion module FX5-80SSC-G, MELSEC iQ-L Series Motion Module LD78G4, MELSEC iQ-L Series Motion Module LD78G16, Motion Control Board MR-EM441G, Block-type remote module NZ2GN2S1-32D, Block-type remote module NZ2GN2S1-32T, Block-type remote module NZ2GN2S1-32TE, Block-type remote module NZ2GN2S1-32DT, Block-type remote module NZ2GN2S1-32DTE, Block-type remote module NZ2GN2B1-32D, Block-type remote module NZ2GN2B1-32T, Block-type remote module NZ2GN2B1-32TE, Block-type remote module NZ2GN2B1-32DT, Block-type remote module NZ2GN2B1-32DTE, Block-type remote module NZ2GNCF1-32D, Block-type remote module NZ2GNCF1-32T, Block-type remote module NZ2GNCE3-32D, Block-type remote module NZ2GNCE3-32DT, Block-type remote module NZ2GN12A4-16D, Block-type remote module NZ2GN12A4-16DE, Block-type remote module NZ2GN12A2-16T, Block-type remote module NZ2GN12A2-16TE, Block-type remote module NZ2GN12A42-16DT

Mitigation

Mitsubishi Electric CC-Link IE TSN Vulnerability Allows Network-Based DoS in Industrial Controllers

A vulnerability in Mitsubishi Electric's CC-Link IE TSN communication protocol could allow an attacker on the same network segment to tamper with communication data, potentially causing denial-of-service (DoS) or incorrect operation of affected industrial controllers. The flaw, tracked as CVE-2026-13584, affects a wide range of MELSEC MX controllers, master/local modules, motion modules, and remote I/O modules. Mitsubishi Electric has released an update (Update A) to address the issue.

12m

CVE-2026-13584

Quick answers

Related News

Mitsubishi Electric CC-Link IE TSN Vulnerability Allows Network-Based DoS in Industrial Controllers