CVE-2026-16438: GENESIS64 versions 10.97.3 and prior; +5 more affected products

Affected technology

GENESIS64 · versions 10.97.3 and prior
Mitsubishi Electric Corporation

ICONICS Suite · versions 10.97.3 and prior
Mitsubishi Electric Corporation

Hyper Historian · versions 10.97.3 and prior
Mitsubishi Electric Corporation

AnalytiX · versions 10.97.3 and prior
Mitsubishi Electric Corporation

MobileHMI · versions 10.97.3 and prior
Mitsubishi Electric Corporation

MC Works64 · all versions
Mitsubishi Electric Corporation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · High privileges required · No user interaction required

What an attacker can do

Users with that administrator accounts can locally or remotely launch and operate DCOM objects that should require UAC elevation. Vendor/CNA’s CVSS 4.0 assessment (base score 9.4/10) rates confidentiality, integrity and availability impact as high.