RobotRisk Autonomous Systems Incident & Risk Register
RobotRisk / Mitsubishi Electric (Automation) / 27 Aug 2026

CISA updates Mitsubishi Electric CNC Series advisory for denial-of-service vulnerability

S1 · 27 Aug 2026 · Mitsubishi Electric (Automation) · Worldwide

Record

CompanyMitsubishi Electric (Automation)
Categorymachinery oem
Type(s)cyber
Date27 Aug 2026 (day precision)
Time of daynot documented
LocationWorldwide
SeverityS1 (near-miss / disclosed vulnerability)
Scalemultiple CNC Series controller versions
Confidencehigh
Verified flagCited source on file; not independently re-verified

Summary

CISA revised advisory ICSA-26-078-05 for Mitsubishi Electric CNC Series products after a vulnerability that could let a remote attacker cause an out-of-bounds read and denial-of-service condition. The advisory lists affected CNC controller software versions and Mitsubishi Electric mitigations.

Primary source

CISA ICS advisory ICSA-26-078-05

Publisher: CISA ICS advisory ICSA-26-078-05 · Retrieved: 2026-09-11

Supporting source rows (1)
DateSupporting source rowPublisherLink
27 Aug 2026 CISA updates Mitsubishi Electric CNC Series advisory for denial-of-service vulnerability CISA ICS advisory ICSA-26-078-05 CISA ICS advisory ICSA-2

Mitsubishi Electric (Automation) other incidents timeline

machinery oem context

cyber context

Mitsubishi Electric (Automation) category position

Related incidents

Other Mitsubishi Electric (Automation) entries

Report a correction

Open a prefilled GitHub issue

Also from Critical Systems Analysis: CSA - functional safety engineering · Company directory · FSTalent - functional safety jobs