CVE-2026-16437: GENESIS versions 11.03 and prior; +9 more affected products

Affected technology

GENESIS · versions 11.03 and prior
Mitsubishi Electric Corporation

GENESIS64 · versions 10.97.3 and prior
Mitsubishi Electric Corporation

ICONICS Suite · versions 10.97.3 and prior
Mitsubishi Electric Corporation

Hyper Historian · versions 10.97.3 and prior
Mitsubishi Electric Corporation

AnalytiX · versions 10.97.3 and prior
Mitsubishi Electric Corporation

MobileHMI · versions 10.97.3 and prior
Mitsubishi Electric Corporation

IoTWorX · versions 10.97.3 and prior
Mitsubishi Electric Corporation

MC Works64 · all versions
Mitsubishi Electric Corporation

GENESIS32 · all versions
Mitsubishi Electric Corporation

BizViz · all versions
Mitsubishi Electric Corporation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · High privileges required · No user interaction required

What an attacker can do

An authenticated local user with administrative privileges can unlock the system by tampering with the management file that stores the challenge response. Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality, integrity and availability impact as high.