{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2026-13584 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2026-13584 yet. Limit exposure of the affected software until one is available.","what":"CVE-2026-13584 is a high-severity vulnerability in Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5-G, published on 30 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2026-13584 and fix it if it is affected.\n\nWhat it is: CVE-2026-13584 is a high-severity vulnerability in Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5-G, published on 30 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2026-13584 in the wild and no public exploit code.\n\nAffected product: Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5-G. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-13584/ (Markdown: https://insights.sbomify.com/CVE-2026-13584/index.md)","id":"CVE-2026-13584","markdown":"https://insights.sbomify.com/CVE-2026-13584/index.md","name":"CVE-2026-13584","record":{"aliases":["GHSA-r2qx-6p3c-jwf2"],"analysis":{"component_type":"ics_ot","fix_type":"patch","impacts":["data_modify","denial_of_service"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Industrial control network","requires_auth":"none","summary":"An attacker on the network can tamper with control data and cause denial of service in Mitsubishi industrial devices via crafted packets.","user_interaction":"not_required","vuln_class":"other"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Mitsubishi","cpe":[],"cvss":{"score":7.1,"severity":"high","source":"cna","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N","version":"4.0"},"cwes":[{"id":"CWE-924","name":"Improper Enforcement of Message Integrity During Transmission in a Communication Channel"}],"description":"Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, MELSEC iQ-L Series Motion Module, Motion Control Board, Block-type remote module, Block-type remote module with safety functions, Analog-Digital converter module, Digital-Analog converter module, CC-Link IE TSN compatible coupler, FPGA module, Tension meter, AC Servo MELSERVO-J5, AC Servo MELSERVO-JET, Liner Track System MTR-S series Linear track control module, Inverter FR-A800/F800/E800 Series, Industrial Robot CR800-D series controller Network Base Card, CC-Link IE TSN expansion unit, CC-Link IE TSN-CC-Link IE Field Network bridge module, CC-Link IE TSN-AnyWireASLINK bridge module, Energy Measuring Unit CC-Link IE TSN Communication Unit, GOT3000 Series, CC-Link IE TSN Communication Unit, Motion Control Software, CC-Link IE TSN Communication Software for Windows, Analysis Support Software MELSOFT VIMA, Master/Local module Designated communication LSI DeviceKit, Remote Station Communication LSI with GbE-PHY, CC-Link IE TSN Master/Local module Designated communication LSI SDK, and Remote station software development kit allows an attacker with access to a CC-Link IE TSN network to tamper with communication data (control input/output values) by sending specially crafted packets under specific timing conditions. This could allow the attacker to cause a denial-of-service (DoS) condition in the affected product by interfering with its control function or causing it to operate incorrectly.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol","id":"CVE-2026-13584","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"other","year":"2026"},"n_packages":0,"n_references":3,"next":{"headline":"Information disclosure in Business Manager","id":"CVE-2026-13585"},"packages":[],"prev":{"headline":"Edimax EW-7478APC POST Request formUSBFolder buffer overflow","id":"CVE-2026-13583"},"products":["AC Servo MELSERVO-J5 MR-J5-G","AC Servo MELSERVO-J5 MR-J5-G-HS","AC Servo MELSERVO-J5 MR-J5-G-LL","AC Servo MELSERVO-J5 MR-J5-G-RJ","AC Servo MELSERVO-J5 MR-J5D-G4","AC Servo MELSERVO-J5 MR-J5W-G","AC Servo MELSERVO-J5 MR-MD333G","AC Servo MELSERVO-JET MR-JET-G","AC Servo MELSERVO-JET MR-JET-G4-HS","Analog-Digital converter module NZ2GN2B-60AD4","Analog-Digital converter module NZ2GN2S-60AD4","Analysis Support Software MELSOFT VIMA SW1DNN-VIMA-M","Block-type remote module NZ2GN12A2-16T","Block-type remote module NZ2GN12A2-16TE","Block-type remote module NZ2GN12A4-16D","Block-type remote module NZ2GN12A4-16DE","Block-type remote module NZ2GN12A42-16DT","Block-type remote module NZ2GN12A42-16DTE","Block-type remote module NZ2GN2B1-16D","Block-type remote module NZ2GN2B1-16T","Block-type remote module NZ2GN2B1-16TE","Block-type remote module NZ2GN2B1-32D","Block-type remote module NZ2GN2B1-32DT","Block-type remote module NZ2GN2B1-32DTE","Block-type remote module NZ2GN2B1-32T","Block-type remote module NZ2GN2B1-32TE","Block-type remote module NZ2GN2S1-16D","Block-type remote module NZ2GN2S1-16T","Block-type remote module NZ2GN2S1-16TE","Block-type remote module NZ2GN2S1-32D","Block-type remote module NZ2GN2S1-32DT","Block-type remote module NZ2GN2S1-32DTE","Block-type remote module NZ2GN2S1-32T","Block-type remote module NZ2GN2S1-32TE","Block-type remote module NZ2GNCE3-32D","Block-type remote module NZ2GNCE3-32DT","Block-type remote module NZ2GNCF1-32D","Block-type remote module NZ2GNCF1-32T","Block-type remote module with safety functions NZ2GNS12A2-14DT","Block-type remote module with safety functions NZ2GNS12A2-16DTE","Block-type remote module with safety functions NZ2GNSS2-16DTE","Block-type remote module with safety functions NZ2GNSS2-16DTE-K","Block-type remote module with safety functions NZ2GNSS2-8D","Block-type remote module with safety functions NZ2GNSS2-8D-K","Block-type remote module with safety functions NZ2GNSS2-8TE","Block-type remote module with safety functions NZ2GNSS2-8TE-K","CC-Link IE TSN Communication Software for Windows SW1DND-CCIETCT-M","CC-Link IE TSN Communication Unit GT25-J71GN13-T2","CC-Link IE TSN Master/Local module Designated communication LSI SDK SW1DNN-GN610SRC-M","CC-Link IE TSN compatible coupler NZ2FT-GN","CC-Link IE TSN expansion unit FCU8-EX569","CC-Link IE TSN interface board NZ81GN11-SX","CC-Link IE TSN interface board NZ81GN11-T2","CC-Link IE TSN-AnyWireASLINK bridge module NZ2AW1GNAL","CC-Link IE TSN-CC-Link IE Field Network bridge module NZ2GN-GFB","Digital-Analog converter module NZ2GN2B-60DA4","Digital-Analog converter module NZ2GN2S-60DA4","Energy Measuring Unit CC-Link IE TSN Communication Unit EMU4-CM-TSN","FPGA module NZ2GN2S-D41D01","FPGA module NZ2GN2S-D41P01","FPGA module NZ2GN2S-D41PD02","GOT3000 Series GT3708-XRBA","GOT3000 Series GT3708-XRBD","GOT3000 Series GT3710-XRBA","GOT3000 Series GT3710-XRBD","GOT3000 Series GT3712-WXCBD","GOT3000 Series GT3712-XRBA","GOT3000 Series GT3712-XRBD","GOT3000 Series GT3715-FHCBD","GOT3000 Series GT3715-XRBA","GOT3000 Series GT3715-XRBD","Industrial Robot CR800-D series controller Network Base Card 2F-DQ535-TSN","Inverter FR-A800/F800/E800 Series FR-A800-GN","Inverter FR-A800/F800/E800 Series FR-A8NCG","Inverter FR-A800/F800/E800 Series FR-A8NCG-S","Inverter FR-A800/F800/E800 Series FR-E800-E","Inverter FR-A800/F800/E800 Series FR-E800-SCE","Liner Track System MTR-S series Linear track control module MTR-SCU00-4G","Liner Track System MTR-S series Linear track control module MTR-SCU00-PG","MELSEC MX Controller MX-F model MXF100-16-N32","MELSEC MX Controller MX-F model MXF100-16-P32","MELSEC MX Controller MX-F model MXF100-8-N32","MELSEC MX Controller MX-F model MXF100-8-P32","MELSEC MX Controller MX-F model MXF100S-16-N32","MELSEC MX Controller MX-F model MXF100S-16-P32","MELSEC MX Controller MX-F model MXF100S-8-N32","MELSEC MX Controller MX-F model MXF100S-8-P32","MELSEC MX Controller MX-F model MXF100S-N32","MELSEC MX Controller MX-F model MXF100S-P32","MELSEC MX Controller MX-R model MXR300-16","MELSEC MX Controller MX-R model MXR300-32","MELSEC MX Controller MX-R model MXR300-64","MELSEC MX Controller MX-R model MXR500-128","MELSEC MX Controller MX-R model MXR500-256","MELSEC iQ-L Series Motion Module LD78G4","MELSEC iQ-L Series Motion module LD78G16","Master/Local module Designated communication LSI DeviceKit NZ2KT-NPETNG51","Master/local module FX5-CCLGN-MS","Master/local module RJ71GN11-EIP","Master/local module RJ71GN11-SX","Master/local module RJ71GN11-T2","Motion Control Board MR-EM441G","Motion Control Software SWM-G","Motion Control Software SWM-G-N1","Motion module FX5-40SSC-G","Motion module FX5-80SSC-G","Motion module RD78G16","Motion module RD78G4","Motion module RD78G64","Motion module RD78G8","Motion module RD78GHV","Motion module RD78GHW","Remote Station Communication LSI with GbE-PHY NZ2GACP620-300","Remote Station Communication LSI with GbE-PHY NZ2GACP620-60","Remote Station Communication LSI with GbE-PHY NZ2GACP621-720","Remote Station Communication LSI with GbE-PHY NZ2GACP621-90","Remote station software development kit SW1DNC-GNSDK1S-M","Remote station software development kit SW1DNC-GNSDK2S-M","Tension meter LM7-1LG","Tension meter LM7-2LG"],"published":"2026-07-30","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-09-17","vendors":["Mitsubishi Electric Corporation"]},"summary":"An attacker on the network can tamper with control data and cause denial of service in Mitsubishi industrial devices via crafted packets.","url":"https://insights.sbomify.com/CVE-2026-13584/"}