CVE-2026-8806

HighCVSS 8.7/10Last modified Jun 22, 2026

Description

Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a denial-of-service (DoS) condition in the affected product by continuously sending a large number of communication packets to the Ethernet port of the product in a short period of time, increasing the processing load of the product, preventing the internal anomaly-detection processing from being performed, and causing the communication function to stop.

Metrics

CVSS 4.0 8.7/10

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-440

Affected software

No affected versions have been published.

Timeline

Published: Jun 19, 2026
Last modified: Jun 22, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-880606.1Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to CVE-2026-880615.8career-ops is an open-source AI-assisted job search and application management tool. Prior to 0.8.0, the career-ops local web dashboard web/CVE-2026-880629.5OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /CVE-2026-880648.8Backstage is an open framework for building developer portals. Prior to 1.14.6 and from 1.15.0 until 1.15.4, the @backstage/plugin-techdocs-CVE-2026-880657.5`tts-be` is a backend for a timetable selector that aims to help students better choose their class schedules. Versions prior to 2.1.0 have CVE-2026-880699.3Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image,CVE-2026-880707.8Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.CVE-2026-880717.8Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.CVE-2026-880727.8Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.CVE-2026-880737.8Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-880747.8Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges lo CVE-2026-880758.8Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized