CRITICAL 9.2 NVD
CVE-2026-15688
Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to succes
Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in memory, and thereby may be able to view, tamper with, destroy, or delete control programs.
References
- https://jvn.jp/vu/JVNVU99700314
- https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2026-007_en.pdf
This critical severity vulnerability with a CVSS score of 9.2 was published on 2026-09-17 via NVD.
Risk Timeline
CVE Disclosed2026-09-17 · -1 days ago
Remediation Resources
Official Advisory
www.mitsubishielectric.com/psirt/vulnerability/pdf/2026-007_en.pdfAnalysis & PoC
jvn.jp/vu/JVNVU99700314
vulnfeed aggregates 12865 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.