SecAlerts
m

mitsubishi electric

Security Risk Profile

60
/100
high

Security Risk Score

Comprehensive risk assessment based on 125 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 28, 2008 to present

125
Total CVEs
82
Critical+High
0
Exploited
79
Unpatched

Threat Assessment

Avg CVSS
7.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
79
Critical/High
Risk Level
60/100
high
🆕 23Fresh (<7d)📈 26 in Last 30 Days

Severity Distribution

Critical
30
High
52
Medium
19
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
5

Age Distribution

Common Weaknesses (CWE)

1
Integer Overflow
4
2
Input Validation
4
3
Buffer Overflow
3
4
SQL Injection
2
5
OS Command Injection
2

Most Affected Products

1. Mitsubishielectric Gx Works331
2. Mitsubishi Electric GENESIS6415
3. Mitsubishi Electric MC Works6413
4. Mitsubishi Electric ICONICS Suite12
5. Mitsubishi Electric Hyper Historian10

Recent Vulnerabilities

See more →
CVE-2026-16438
CVSS 9.4critical

An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64

Oct 15, 2026🔧 No Patch
CVE-2026-16437
CVSS 7.1high

An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz

Oct 15, 2026🔧 No Patch
CVE-2026-16436
CVSS 9.2critical

An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz

Oct 15, 2026🔧 No Patch
CVE-2026-15688
CVSS 9.2critical

Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting

Sep 17, 2026🔧 No Patch
CVE-2026-13584
CVSS 7.1high

Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol

Jul 30, 2026🔧 No Patch
CVE-2026-8806
CVSS 8.7EPSS 1%high

Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series FX5-ENET/IP Ethernet module

Jun 19, 2026🔧 No Patch
CVE-2026-8805
CVSS 8.7EPSS 1%high

Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series EtherNet/IP module

Jun 19, 2026🔧 No Patch
https://reddit.com/r/cybersecurity/comments/1u9doic/cve20265667_unauthenticated_remote_control_of/
unknown

CVE-2026-5667: Unauthenticated Remote Control of Mitsubishi MAC-577IF-2E WiFi Adapters via Probe Request Reconnaissance

Jun 18, 2026🔧 No Patch
CVE-2026-5667
CVSS 7.2high

Information Disclosure, Information Tampering, or Denial-of-Service (DoS) Vulnerability in Multiple Home Appliances

Jun 17, 2026🔧 No Patch
CVE-2025-14816
CVSS 9.3critical

Information Disclosure, Tampering, and Denial-of-Service Vulnerabilities in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64

Apr 8, 2026🔧 No Patch

Monitor mitsubishi electric in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.