# Mitsubishi Electric vulnerabilities Source: https://junglewise.ai/threats/vendors/mitsubishi-electric Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/mitsubishi-electric.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 10 vulnerabilities in Mitsubishi Electric: 0 in the last 7 days and 4 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-16438, was published on 15 October 2026. 3 vulnerabilities in the last four weeks, up 200% on the four before (1). 6 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 3 - Last 90 days: 4 - All time: 10 (0 critical, 0 exploited in the wild) ## About Mitsubishi Electric A global leader in the manufacture and sales of electrical and electronic equipment used in energy and electric systems, industrial automation, information and communication systems, electronic devices, and home appliances. ## Latest Mitsubishi Electric vulnerabilities - [CVE-2026-16438: Mitsubishi Electric GENESIS64 privilege assignment in DCOM](https://junglewise.ai/threats/cve-2026-16438-incorrect-privilege-assignment-vulnerability-in-mitsubishi) (info, published 15 Oct 2026) - [CVE-2026-16437: Mitsubishi Electric GENESIS weak password recovery mechanism](https://junglewise.ai/threats/cve-2026-16437-weak-password-recovery-mechanism-for-forgotten-password) (info, published 15 Oct 2026) - [CVE-2026-16436: Mitsubishi Electric GENESIS weak password recovery mechanism](https://junglewise.ai/threats/cve-2026-16436-weak-password-recovery-mechanism-for-forgotten-password) (info, published 15 Oct 2026) - [CVE-2026-15688: Mitsubishi Electric GX Works3 authentication bypass in block password](https://junglewise.ai/threats/cve-2026-15688-mitsubishi-electric-gx-works3-authentication-bypass-in-block) (high, CVSS 8.8, published 17 Sep 2026) - [CVE-2026-13584: Mitsubishi Electric Multiple Products Message Integrity Failure in CC-Link IE TSN](https://junglewise.ai/threats/cve-2026-13584-mitsubishi-electric-multiple-products-message-integrity-failure) (high, CVSS 7.1, published 30 Jul 2026) - [CVE-2026-8806: Mitsubishi Electric MELSEC iQ-F FX5-ENET/IP denial of service](https://junglewise.ai/threats/cve-2026-8806-mitsubishi-electric-melsec-iq-f-fx5-enet-ip-denial-of-service) (info, CVSS 8.7, published 19 Jun 2026) - [CVE-2026-8805: Mitsubishi Electric MELSEC iQ-F FX5-EIP integer overflow in EtherNet/IP](https://junglewise.ai/threats/cve-2026-8805-mitsubishi-electric-melsec-iq-f-fx5-eip-integer-overflow-in) (info, CVSS 8.7, published 19 Jun 2026) - [CVE-2025-14816: Mitsubishi Electric Multiple Products Cleartext Storage in GUI](https://junglewise.ai/threats/cve-2025-14816-mitsubishi-electric-multiple-products-cleartext-storage-in-gui) (info, CVSS 9.3, published 8 Apr 2026) - [CVE-2025-14815: Mitsubishi Electric GENESIS64 and ICONICS Suite cleartext storage of credentials](https://junglewise.ai/threats/cve-2025-14815-mitsubishi-electric-genesis64-and-iconics-suite-cleartext-storage) (info, CVSS 9.3, published 8 Apr 2026) - [CVE-2025-2399: Mitsubishi Electric CNC out-of-bounds read in network protocol handler](https://junglewise.ai/threats/cve-2025-2399-mitsubishi-electric-cnc-out-of-bounds-read-in-network-protocol) (medium, CVSS 5.9, published 10 Mar 2026) ## Most severe Mitsubishi Electric vulnerabilities - [CVE-2026-15688: Mitsubishi Electric GX Works3 authentication bypass in block password](https://junglewise.ai/threats/cve-2026-15688-mitsubishi-electric-gx-works3-authentication-bypass-in-block) (high, CVSS 8.8, published 17 Sep 2026) - [CVE-2026-13584: Mitsubishi Electric Multiple Products Message Integrity Failure in CC-Link IE TSN](https://junglewise.ai/threats/cve-2026-13584-mitsubishi-electric-multiple-products-message-integrity-failure) (high, CVSS 7.1, published 30 Jul 2026) - [CVE-2025-2399: Mitsubishi Electric CNC out-of-bounds read in network protocol handler](https://junglewise.ai/threats/cve-2025-2399-mitsubishi-electric-cnc-out-of-bounds-read-in-network-protocol) (medium, CVSS 5.9, published 10 Mar 2026) - [CVE-2025-14816: Mitsubishi Electric Multiple Products Cleartext Storage in GUI](https://junglewise.ai/threats/cve-2025-14816-mitsubishi-electric-multiple-products-cleartext-storage-in-gui) (info, CVSS 9.3, published 8 Apr 2026) - [CVE-2025-14815: Mitsubishi Electric GENESIS64 and ICONICS Suite cleartext storage of credentials](https://junglewise.ai/threats/cve-2025-14815-mitsubishi-electric-genesis64-and-iconics-suite-cleartext-storage) (info, CVSS 9.3, published 8 Apr 2026) - [CVE-2026-8806: Mitsubishi Electric MELSEC iQ-F FX5-ENET/IP denial of service](https://junglewise.ai/threats/cve-2026-8806-mitsubishi-electric-melsec-iq-f-fx5-enet-ip-denial-of-service) (info, CVSS 8.7, published 19 Jun 2026) - [CVE-2026-8805: Mitsubishi Electric MELSEC iQ-F FX5-EIP integer overflow in EtherNet/IP](https://junglewise.ai/threats/cve-2026-8805-mitsubishi-electric-melsec-iq-f-fx5-eip-integer-overflow-in) (info, CVSS 8.7, published 19 Jun 2026) - [CVE-2026-16436: Mitsubishi Electric GENESIS weak password recovery mechanism](https://junglewise.ai/threats/cve-2026-16436-weak-password-recovery-mechanism-for-forgotten-password) (info, published 15 Oct 2026) - [CVE-2026-16438: Mitsubishi Electric GENESIS64 privilege assignment in DCOM](https://junglewise.ai/threats/cve-2026-16438-incorrect-privilege-assignment-vulnerability-in-mitsubishi) (info, published 15 Oct 2026) - [CVE-2026-16437: Mitsubishi Electric GENESIS weak password recovery mechanism](https://junglewise.ai/threats/cve-2026-16437-weak-password-recovery-mechanism-for-forgotten-password) (info, published 15 Oct 2026) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, up 200% on the four before (1). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 1 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 3 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Mitsubishi Electric technologies - [Mitsubishi Electric AnalytiX](https://junglewise.ai/threats/technologies/analytix): 5 vulnerabilities - [Mitsubishi Electric GENESIS64](https://junglewise.ai/threats/technologies/genesis64): 5 vulnerabilities - [Mitsubishi Electric Hyper Historian](https://junglewise.ai/threats/technologies/hyper-historian): 5 vulnerabilities - [Mitsubishi Electric ICONICS Suite](https://junglewise.ai/threats/technologies/iconics-suite): 5 vulnerabilities - [Mitsubishi Electric MC Works64](https://junglewise.ai/threats/technologies/mc-works64): 5 vulnerabilities - [Mitsubishi Electric MobileHMI](https://junglewise.ai/threats/technologies/mobilehmi): 5 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Mitsubishi Electric vulnerabilities", https://junglewise.ai/threats/vendors/mitsubishi-electric, 9 November 2026.