Skip to content
OpenAdvisories
High ICSA-26-181-01 4 CVEs

Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M

Published Jun 30, 2026 · Updated Jun 30, 2026

Vendor: Mitsubishi Electric Product: MELSOFT Update Manager SW1DND-UDM-M

Summary

Successful exploitation of these vulnerabilities could allow a local attacker to tamper with or destroy information in the affected product, cause a denial-of-service condition in the affected product, or execute arbitrary code when a specially crafted archive file is decompressed by the 7-Zip component included in MELSOFT Update Manager.

Vulnerabilities 4

  • High 7.0
    CVE-2025-11001 Public exploit EPSS 27%

    7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability

    7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability bu…

    7-Zip 7-Zip p7zip 7zip Debian Ubuntu
  • Medium 5.5
    CVE-2025-53816

    GHSL-2025-058 - 7-Zip Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder

    7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue.

    ipavlov 7-Zip 7zip p7zip-rar Debian Ubuntu
  • Medium 5.5
    CVE-2025-53817

    GHSL-2025-059 - 7-Zip - Null pointer array write attempt in NArchive::NCom::CHandler::GetStream

    7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue.

    ipavlov 7-Zip p7zip 7zip Debian Ubuntu
  • Low 3.6
    CVE-2025-55188 Public exploit

    7-Zip before 25.01 does not always properly handle symbolic links during extraction.

    7-Zip 7-Zip p7zip 7zip Debian Ubuntu

Revision history

  1. #1

    Initial Republication of Mitsubishi Electric 2026-004

References