Skip to content
OpenAdvisories
High ICSA-26-260-02 1 CVE

Mitsubishi Electric GX Works3 and Motion Control Settings

Published Sep 17, 2026 · Updated Sep 17, 2026 · Revision 2

Vendor: Mitsubishi Electric Product: GX Works3 Product: Motion Control Settings (Software packaged with GX Works3)

Summary

Successful exploitation of this vulnerability could allow a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modify part of the executable module in memory, and thereby allows the attacker to view, tamper with, destroy, or delete control programs.

Vulnerabilities 1

  • Critical 9.2
    CVE-2026-15688

    Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting

    Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modif…

    Mitsubishi Electric GX Works3 Motion Control Setting ICS / OT

Revision history

  1. #2

    Initial CISA Republication of Mitsubishi Electric 2026-007 advisory

  2. #1

    Initial Publication

References