CVE-2026-15688: critical vulnerability in Mitsubishi Electric Corporation GX Works3
Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.2epss 0.2%
Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in memory, and thereby may be able to view, tamper with, destroy, or delete control programs.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:H/SA:H
Affected products
Mitsubishi Electric Corporation · GX Works3Mitsubishi Electric Corporation · Motion Control SettingRelated CVEs — Mitsubishi Electric Corporation GX Works3
In the same product, most dangerous first.