OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-15688

CRITICAL · CVSS 9.2 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

Mitsubishi Electric GX Works3 and Motion Control Setting are vulnerable due to a flawed authentication algorithm that allows local attackers to bypass authentication with an invalid block password by manipulating the executable module in memory. This critical vulnerability could enable attackers to access, modify, or delete control programs, posing significant risks to operational integrity and security. Organizations using these products should prioritize immediate remediation to mitigate potential exploitation.

CVE
CVE-2026-15688
Severity
CRITICAL
CVSS
9.2
EPSS
0.12%

Original NVD Description

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in memory, and thereby may be able to view, tamper with, destroy, or delete control programs.