Skip to content
OpenAdvisories
Critical 1 exploited CVE ICSA-26-300-02 4 CVEs

Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz

Published Oct 15, 2026 · Updated Oct 27, 2026 · Revision 2

Vendor: Mitsubishi Electric Vendor: Mitsubishi Electric Iconics Digital Solutions Product: AnalytiX Product: AnalytiX Product: BizViz Product: BizViz Product: GENESIS Product: GENESIS Product: GENESIS32 Product: GENESIS32 Product: GENESIS64 Product: GENESIS64 Product: Hyper Historian Product: Hyper Historian Product: ICONICS Suite Product: ICONICS Suite Product: IoTWorX Product: IoTWorX Product: MC Works64 Product: MobileHMI Product: MobileHMI

Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass authentication (CVE-2026-16436 and CVE-2026-16437), or perform arbitrary operations (CVE-2026-16438), resulting in information disclosure, tampering with, destruction, or deletion of information, and a denial-of-service (DoS) condition of the system.

Vulnerabilities 4

Revision history

  1. #2

    Initial CISA Republication of Mitsubishi Electric 2026-006 advisory

  2. #1

    Initial Publication

References