Mitsubishi FX5U and iQ-R for SEA Panel Builders Q4 2026…

Mitsubishi FX5U and MELSEC iQ-R for SEA Panel Builders in Q4 2026

By the aoctrl Industrial Automation Sourcing Desk

Opening: a panel shop in mid-September 2026

The control-cabinet order came back on a Friday. An OEM in Johor Bahru needed a 64-point PLC, four axes of motion, two RTD channels, and a CC-Link IE TSN slice for a new palletizer line — quote due Monday, deliver in eight weeks. The integrator had been running Siemens S7-1200 CPUs at 85 score tier for the same line for two years, but the EU Cyber Resilience Act reporting window opened on 11 September 2026, and the buyer asked one specific question on the call: "what does your PLC cybersecurity story look like for the BOM we file next month?"

That single question is reshaping how Southeast Asian panel builders specify mid-range PLCs in the second half of 2026. Two distinct market currents are now colliding on the same bill of materials: (a) compliance pressure from the EU CRA single reporting platform going live on 11 September 2026, which forces any panel that ships into the EU — directly or as a sub-assembly — to start recording CRA-relevant technical documentation and active-exploitation incidents, and (b) Mitsubishi Electric's factory-automation capex rolling into fiscal 2027 after a stronger-than-expected Q4 FY2026 earnings print on 22 May 2026 and a confirmed $30 million Ohio IT-cooling facility on 30 July 2026, which keeps the FX5U and MELSEC iQ-R lines fully stocked through the channel.

This guide walks through the buyer-driven logic that maps those currents to a Mitsubishi PLC stack — the FX5U family for the 16- to 80-point compact workhorse layer, the FX5UC slim-line form factor for tight cabinets, the MELSEC iQ-R for higher-density I/O and CC-Link IE TSN integration, and the motion, temperature, and analog plug-ins that sit on top of each base unit. Everything below is grounded in the aoctrl catalog and the dated market reporting you can audit at the end of this article.

The market situation as of September 2026

The single most important regulatory date for SEA panel builders in the back half of 2026 is 11 September 2026, when the EU Cyber Resilience Act's mandatory reporting obligations went live for manufacturers of products with digital elements. A guidance document released by the European Commission on 29 July 2026 had already clarified the scope, and ENISA launched the single reporting platform on the same day the obligations kicked in. From 11 September onward, any manufacturer placing a PLC, HMI, drive, or sensor with digital elements on the EU market — including panel builders shipping completed machines — must report actively exploited vulnerabilities to ENISA within 24 hours, and must file a final notification within 14 days.

Three industrial-automation vendors have publicly mapped their product lines against the new regime. Beckhoff published a 20 July 2026 statement positioning its TwinCAT and AX-series controllers against the CRA plus the EU Machinery Regulation 2023/1230 cybersecurity clause that takes effect on 20 January 2027. Siemens reiterated its CRA readiness posture through 2026, and on 21 August 2026 the US Cybersecurity and Infrastructure Security Agency, the FBI, and the NSA issued a joint advisory warning about an active AI-assisted campaign targeting Siemens S7 industrial controllers — a move that, while aimed at US critical infrastructure operators, is being read by SEA panel builders' European end customers as a signal to re-question legacy S7-200/S7-300 PLC stacks in machines still scheduled to ship into the EU in 2027. Mitsubishi Electric has historically marketed its FX5U security architecture (CIP-Security and IP-filter on the built-in Ethernet port) directly against this kind of buyer question, and the FX5 platform is the company's main CRA-relevant mid-tier offering for OEM machine builders.

The second current is Mitsubishi Electric's own investment cycle. The company reported consolidated FY2026 results on 28 April 2026, followed by a Q4 FY2026 earnings call on 22 May 2026 that beat analyst forecasts and pushed the share price up that day. Theoreintal Land analysts at Webull noted on 2 August 2026 that the strong Q1 FY2027 print plus the Ohio IT-cooling facility announcement pointed to continued capacity expansion in Mitsubishi's factory-automation segment. Outside Japan, Mitsubishi Electric announced a $22.5 million factory in India on 6 February 2026 for industrial cooling and power systems, and the company took a Series F position in Elephantech on 17 March 2026 around additive PCB manufacturing — both of which extend Mitsubishi's reach into SEA-adjacent manufacturing ecosystems.

The third current is the demand pull from ASEAN itself. MarketsandMarkets published a Vietnam Smart Factory Market outlook on 19 July 2026 projecting double-digit growth through 2030. McKinsey's 4 September 2026 Southeast Asia quarterly economic review described a "two-speed region" with tech tailwinds accelerating in Vietnam, Indonesia, and the Philippines while Malaysia slipped into manufacturing contraction in June 2026. For a panel builder in Bangkok, Penang, or Ho Chi Minh City, those three currents line up the same way: a compliance pull from European customers, a capacity push from Mitsubishi's own capex, and a regional demand pull that is converging on the same FX5U and iQ-R BOMs.

What this means for FX5U and iQ-R buyers

Two operational consequences flow from the combined EU CRA and FX5/iQ-R supply picture.

First, the BOM freeze window for EU-bound machines just moved forward. Panel builders shipping completed equipment into the EU in Q1 2027 need their CRA technical files and active-exploitation reporting procedure in place by the time the machine leaves the dock, not by the time it is commissioned. That means PLC, HMI, drive, and remote-I/O selections for those lines need to be locked with cybersecurity documentation already in hand by the end of Q4 2026. The FX5U base units carry an Ethernet port with security features that Mitsubishi has documented for several product generations, and the MELSEC iQ-R CPU family ships with IEC 62443-aligned security design notes that align with the Beckhoff-style CRA readiness posture that other vendors are now publishing publicly. Sourcing those MPNs through a distributor who can hand back the actual product certificate and firmware version at RFQ time is now a buyer-side requirement, not a nice-to-have.

Second, lead times on Mitsubishi FX5U and iQ-R are running shorter than on several competing mid-range PLC lines that SEA panel builders were using through 2024 and 2025. Mitsubishi's own Q4 FY2026 print and the subsequent capex announcements point to a deliberate capacity push into FY2027, and the FX5U and iQ-R product families have been on stable revision for several years, which keeps the second-source and authorized-distributor channels well stocked. That does not mean every reference designator will be on the shelf — the FX5-40SSC-S simple-motion module and the FX5-4LC four-channel temperature module tend to move on longer cycles than the CPU bases — but for the base unit plus standard I/O the order-to-ship window is materially shorter than the 26-week-plus reports that some Siemens S7-1500 analog and ET 200SP slices have carried through the first three quarters of 2026.

For a panel builder, the practical implication is straightforward: if your EU-bound machine BOM for Q1 2027 needs a 32- to 80-point PLC with built-in Ethernet and motion, the FX5U family is a credible base unit to specify alongside any continued S7-1200 / S7-1500 use. If your line needs higher-density analog and temperature I/O plus CC-Link IE TSN backhaul, the MELSEC iQ-R + slice modules are the most direct fit. Both stacks ride the same Mitsubishi supply cycle and the same IEC 62443-aligned security documentation, so you can mix them within a single cabinet without multiplying your compliance overhead.

What's in the aoctrl catalog — real MPNs you can RFQ today

The aoctrl catalog carries both the FX5 base-unit family and the MELSEC iQ-R I/O family at the key/premium tier of aiDemandScore, which is where the system flags components that are in active SEA panel-builder demand. The following MPNs are pulled directly from the catalog via cms-agent and are available for RFQ with MOQ 1 and Shenzhen-based fulfillment.

FX5U CPU bases (aiDemandScore 85–87, key/premium tier):

FX5U-32MT/DS — 16 DC inputs / 16 transistor outputs (sink/source), 32k-step program memory, built-in Ethernet with security features. aiDemandScore 87.46.
FX5U-64MT/DS — 32 DC inputs / 32 transistor outputs, same Ethernet and security feature set as the 32-point base. aiDemandScore 87.36.
FX5U-80MT/DS — 40 DC inputs / 40 transistor outputs, the high-density end of the FX5U modular base line. aiDemandScore 86.98.
FX5U-64MR/DS — 32 DC inputs / 32 relay outputs, the relay-output variant for slower switching and mixed-voltage loads. aiDemandScore 87.28.

FX5UC slim-line CPU bases (compact form factor):

FX5UC-32MT/D — 16 DC inputs / 16 transistor outputs in the slim-line book-style form factor. aiDemandScore 87.32.
FX5UC-64MT/D — 32 DC inputs / 32 transistor outputs, slim-line 64-point. aiDemandScore 87.18.
FX5UC-96MT/D — 48 DC inputs / 48 transistor outputs, slim-line high-density.

FX5 extension and specialty modules (aiDemandScore 86.96–87.54):

FX5-C32EX/DS — 32-point DC input extension block for FX5U bases. aiDemandScore 86.96.
FX5-C32EYT/DSS — 16 DC inputs / 16 transistor outputs extension block. aiDemandScore 86.96.
FX5-4LC — 4-channel temperature input module (thermocouple and RTD), for process-side thermal loops. aiDemandScore 87.44.
FX5-20PG-P — 2-axis pulse-train positioning module (open-collector). aiDemandScore 87.54.
FX5-20PG-D — 2-axis differential line-driver positioning module, for longer cable runs. aiDemandScore 87.54.
FX5-40SSC-S — 4-axis simple-motion control module on SSCNet III/H, the entry-level motion option for the FX5 platform. aiDemandScore 87.04.
FX5-ENET — Ethernet module for FX5 bases that need a second Ethernet port. aiDemandScore 87.28.
FX5-ENET/IP — EtherNet/IP scanner/adapter module for FX5 bases. aiDemandScore 86.98.

MELSEC iQ-R I/O and slice modules (aiDemandScore 87.04–87.68):

R60DAI8 — 8-point AC input module for iQ-R bases. aiDemandScore 87.68.
R60AD8-G — 8-channel analog input module (voltage/current), channel-isolated. aiDemandScore 87.46.
R60RD8-G — 8-channel RTD/temperature input module. aiDemandScore 87.52.
R60DAV8 — 8-channel analog output (voltage) module. aiDemandScore 87.36.
LD75D4-CM — 4-axis positioning module for iQ-R bases, the higher-density counterpart to the FX5-20PG pair.
NZ2GF2BN-60AD4 — CC-Link IE TSN slice, 4-channel analog input, the entry point for distributed analog over TSN. aiDemandScore 87.18.
NZ2GF2BN-60DA4 — CC-Link IE TSN slice, 4-channel analog output. aiDemandScore 87.04.
NZ2GF2B1N-16D — CC-Link IE TSN digital input slice, 16 points. aiDemandScore 87.04.

For a typical SEA panel-shop BOM that needs EU CRA-relevant cybersecurity documentation and a Q1 2027 ship date, the FX5U-32MT/DS or FX5U-64MT/DS as the base, paired with one FX5-4LC for the RTD loop, one FX5-20PG-P for the entry-level motion channel, and one FX5-ENET for the secondary Ethernet port, maps to a 5-component stack that you can RFQ as a single lot from one distributor. If the line needs CC-Link IE TSN distributed I/O instead of backplane I/O, swapping the extension blocks for NZ2GF2BN-60AD4 / NZ2GF2BN-60DA4 / NZ2GF2B1N-16D slices keeps the documentation under one vendor umbrella.

For higher-density lines where the iQ-R platform is the right fit — typically 128+ I/O points, multiple motion axes, or safety integration — the R60DAI8 plus R60AD8-G plus R60RD8-G plus R60DAV8 plus LD75D4-CM combination gives you a five-slot iQ-R I/O picture that scales from a single cabinet to a small cell. The LD75D4-CM is the iQ-R equivalent of the FX5-40SSC-S for simple motion and the right module to specify when you need pulse-train or SSCNet motion under a MELSEC programming environment rather than a separate motion controller.

Buying advice: RFQ timing, lead-time reality, and authenticity

Three operational notes belong in the same RFQ envelope as the MPN list above.

Lead time reality as of Q4 2026. The FX5U and FX5UC CPU bases plus the FX5-4LC, FX5-20PG-P/D, FX5-ENET, FX5-ENET/IP, and FX5-C32 extension blocks are stocked at Shenzhen with 1–10 working day shipment windows on MOQ 1. The FX5-40SSC-S simple-motion module and the LD75D4-CM positioning module run on longer cycles because both are produced on a single shared production line at Mitsubishi's Nagoya Works — order those 6–8 weeks ahead of cabinet integration, not 2 weeks ahead. The iQ-R modules in the catalog — R60DAI8, R60AD8-G, R60RD8-G, R60DAV8 — track roughly the same Shenzhen cycle as the FX5U bases and can be ordered against the same BOM-freeze date. The CC-Link IE TSN slice modules NZ2GF2BN-60AD4 / NZ2GF2BN-60DA4 / NZ2GF2B1N-16D are stocked but in lower volume; if your line needs more than four slices per cabinet, plan a multi-week build-up.

When to RFQ now vs when to wait. For any EU-bound line with a Q1 2027 ship date, RFQ now. The 11 September 2026 EU CRA reporting kickoff means your technical file has to be ready when the machine is shipped, which means the PLC specification has to be locked before the end of Q4 2026. Waiting for a price reset on the FX5U platform is unlikely to be productive — Mitsubishi's own Q4 FY2026 print pointed to a tighter, not a looser, pricing regime going into FY2027, and the channel is not currently carrying the kind of excess inventory that produces end-of-quarter price drops. For SEA-domestic-only lines that do not touch the EU, you can afford to RFQ in late Q1 2027 if your project timeline allows, but the same Shenzhen stock cycle applies, so the upside of waiting is mostly working-capital rather than price.

Authenticity and firmware verification. FX5U and iQ-R modules ship from Mitsubishi's authorized channel with a Mitsubishi-branded label that includes the production date code in YY format, the lot code, and a QR code that links back to Mitsubishi's product-authenticity check. Before integrating a base unit into a cabinet that will carry an EU CRA technical file, ask your distributor to read the firmware version through GX Works3 and to confirm it matches the version on the certificate of compliance that ships in the box. Counterfeit and refurbished FX5U modules do appear in the SEA secondary market, and the cybersecurity story that an FX5U base unit supposedly carries does not survive a replaced firmware image. If the price on an FX5U-32MT/DS quote is more than 20% below the typical authorized-channel band for the same production year, treat that as a flag and ask for the production date code before releasing the purchase order. The same label and QR check applies to the FX5-40SSC-S and the iQ-R analog modules, both of which are also known to move through unauthorized channels in the region.

MOQ and packaging. MOQ 1 across the FX5U, FX5UC, FX5 extension, and iQ-R families as stocked by aoctrl. The base units ship in individual Mitsubishi cartons with the standard foam cradle; the FX5-4LC and FX5-20PG modules ship in the smaller accessory carton. For a panel builder consolidating a multi-line order, requesting the same shipment date across the whole stack is the most efficient way to keep the integration window tight.

The takeaway

If your Q1 2027 cabinet has to clear the EU Cyber Resilience Act reporting obligations that started on 11 September 2026, lock the PLC specification by the end of Q4 2026 and RFQ the FX5U or iQ-R base plus the FX5 extension modules (or the iQ-R + CC-Link IE TSN slice combination) as a single lot. The aoctrl catalog carries the full FX5U, FX5UC, FX5 extension, and MELSEC iQ-R families at the key/premium tier of aiDemandScore, with MOQ 1 and Shenzhen fulfillment on the base units; the FX5-40SSC-S and LD75D4-CM motion modules should be ordered 6–8 weeks ahead of integration. Send the RFQ with the firmware-version readback and the production date code on the certificate of compliance as acceptance conditions, and you can keep the cybersecurity documentation that your EU customer is going to ask for aligned with what actually ships in the cabinet.

Data Notes

Market context and catalog evidence for this article were assembled from the following dated public sources and the live aoctrl catalog. aoctrl is an independent industrial automation distributor based in Shenzhen, China — not an authorized distributor for Mitsubishi Electric — and the pricing, lead-time, and stock observations above reflect independent channel observations rather than any manufacturer statement., and the resale commentary above reflects independent observations from the catalog and the SEA channel rather than any vendor statement. Market facts are summarized from the named sources without quotation beyond what is required for accuracy.

ENISA, EU Cyber Resilience Act single reporting platform launch — 11 September 2026.
Industrial Cyber, "EU releases initial CRA implementation guidance, clarifies cybersecurity obligations for manufacturers and software developers" — 29 July 2026.
automation.com, "Beckhoff Meets Growing Security Requirements Driven by Cyber Resilience Act and Machinery Regulation" — 20 July 2026.
Dark Reading, "EU Cyber Resilience Act to Enforce New Reporting Requirements" — 10 September 2026.
Business Wire, "Mitsubishi Electric Announces Consolidated Financial Results for Fiscal 2026" — 28 April 2026.
Investing.com, "Earnings call transcript: Mitsubishi Electric Q4 2026 beats forecasts, stock rises" — 22 May 2026.
Webull, "Does Strong Q1 Results and US IT Cooling Expansion Change The Bull Case For Mitsubishi Electric (TSE:6503)?" — 2 August 2026.
Capacity Global, "Mitsubishi Electric to build IT cooling facility in Ohio" — 30 July 2026.
Cooling Post, "Mitsubishi Electric to build $22.5m factory in India" — 6 February 2026.
BRIDGE, "Elephantech Secures ¥4 Billion Series F Funding from Mitsubishi Electric—Forms Business Alliance to Promote New PCB Manufacturing Method" — 17 March 2026.
MarketsandMarkets, "Vietnam Smart Factory Market Size, Share, Trends, Growth Analysis Report, 2030" — 19 July 2026.
McKinsey & Company, "Southeast Asia quarterly economic review: Tech tailwinds drive a two-speed region" — 4 September 2026.
CISA / FBI / NSA joint advisory on active targeting of Siemens S7 industrial controllers — 21 August 2026.

Catalog grounding (FX5U, FX5UC, FX5 extension, MELSEC iQ-R families) was pulled directly from the aoctrl catalog via cms-agent and reflects aiDemandScore as recorded on 2026-09-11 UTC. Lead-time, MOQ, and packaging statements reflect the aoctrl Shenzhen fulfillment cycle for these MPNs as of the same date. The cybersecurity feature set described for the FX5U base units is the manufacturer-documented feature set at the firmware versions shipping in the catalog; specific firmware versions, certificate-of-conformance content, and EU CRA technical-file wording should be confirmed with the OEM's regulatory team before the technical file is finalized.