CVE-2026-16436: GENESIS versions 11.03 and prior; +9 more affected products

Affected technology

GENESIS · versions 11.03 and prior
Mitsubishi Electric Corporation

GENESIS64 · versions 10.97.3 and prior
Mitsubishi Electric Corporation

ICONICS Suite · versions 10.97.3 and prior
Mitsubishi Electric Corporation

Hyper Historian · versions 10.97.3 and prior
Mitsubishi Electric Corporation

AnalytiX · versions 10.97.3 and prior
Mitsubishi Electric Corporation

MobileHMI · versions 10.97.3 and prior
Mitsubishi Electric Corporation

IoTWorX · versions 10.97.3 and prior
Mitsubishi Electric Corporation

MC Works64 · all versions
Mitsubishi Electric Corporation

GENESIS32 · all versions
Mitsubishi Electric Corporation

BizViz · all versions
Mitsubishi Electric Corporation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

A remote attacker can unlock the system by obtaining the challenge response by some means. Vendor/CNA’s CVSS 4.0 assessment (base score 9.2/10) rates confidentiality, integrity and availability impact as high.