GW
Product
GX Works3
1
CVEs
0
On KEV
9.2
Max CVSS
0
New 30D
VulnerabilityHigh
Mitsubishi Electric GX Works3 and Motion Control Settings
View CSAF
Summary
Successful exploitation of this vulnerability could allow a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modify part of the executable module in memory, and thereby allows the attacker to view, tamper with, destroy, or delete control programs.
The following versions of Mitsubishi Electric GX Works3 and Motion Control Settings are affected:
Mitsubishi Electric GX Works3 vers:all/* (CVE-2026-15688)
Mitsubishi Electric Motion Control Settings (Software packaged with GX Works3) vers:all/* (CVE-2026-15688)
CVSS
Vendor
Equipment
Vulnerabilities
v3 8.8
Mitsubishi Electric
Mitsubishi Electric GX Works3 and Motion Control Settings
Incorrect Implementation of Authentication Algorithm
Background
Critical Infrastructure Sectors: Critical Manufacturing
Countries/Areas Deployed: Worldwide
Company Headquarters Location: Japan
Vulnerabilities
Expand All +
CVE-2026-15688
Incorrect Implementation of Authentication Algorithm (CWE-303) vulnerability in the affected products allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modify part of the executable module in memory, and thereby allows the attacker to view, tamper with, destroy, or delete control programs.
View CVE Details
Affected Products
Mitsubishi Electric GX Works3 and...
Sep 17, 2026·CISA Advisories
