Topic

Mitsubishi Electric: news, advisories and analysis

8 articlesUpdated 15 Oct 2026

CyberSecureToday covers Mitsubishi Electric across 8 articles published between 18 Sep 2026 and 15 Oct 2026. The coverage includes 8 vulnerability advisories. 8 advisories are rated critical or high severity.

Stories on Mitsubishi Electric most often intersect with IEC 62443, PLC and SCADA, with Industrial, OT & IoT the most affected sector. The most recent story, “Mitsubishi Electric GENESIS Password Recovery Flaw Puts SCADA Accounts at Risk”, was published 15 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
Mitsubishi Electric GENESIS Password Recovery Flaw Puts SCADA Accounts at Risk
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions…
CST Editorial Desk15 Oct 20267 min read
ThreatsCloud & SaaSCritical
Mitsubishi Electric GENESIS64 and ICONICS Suite Privilege Assignment Flaw Disclosed
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior,…
CST Editorial Desk15 Oct 20267 min read
NewsIndustrial & OTCritical
Mitsubishi Electric MELSEC-Q PLC Vulnerability Enables Unauthenticated Memory Corruption via SLMP Protocol Injection (CVE-2026-78820)
Mitsubishi Electric issues an emergency advisory for MELSEC-Q PLCs (CVE-2026-78820, CVSS 9.3) resolving an unauthenticated SLMP protocol injection flaw.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Mitsubishi Electric MELSEC iQ-F PLC Flaw Enables Memory Overwrite and Axis Stoppage
Mitsubishi Electric and CISA disclose advisory for MELSEC iQ-F compact PLCs, patching a critical Modbus RTU communication buffer overflow (CVE-2026-75890).
CST Editorial Desk12 Oct 20268 min read
ThreatsIndustrial & OTHigh
Mitsubishi Electric MELSEC iQ-R Series PLCs Vulnerable to Unauthenticated Industrial Network Memory Tampering (CVE-2026-59820)
Mitsubishi Electric and CISA warn of a high-severity flaw in MELSEC iQ-R controllers allowing remote network adversaries to alter device memory registers without authentication.
CST Editorial Desk9 Oct 20268 min read
ThreatsIndustrial & OTHigh
Mitsubishi Electric CC-Link IE TSN Protocol Command Injection Flaw Disrupts Factory Automation CVE-2026-13584
CISA Advisory ICSA-26-211-07 warns of a high-severity protocol command manipulation flaw in Mitsubishi Electric CC-Link IE TSN industrial communication modules.
Mei-Lin Chen28 Sep 20268 min read
ThreatsIndustrial & OTCritical
Mitsubishi Electric GX Works3 Authentication Bypass Exposes Industrial PLCs to Memory Manipulation Attacks
Mitsubishi Electric and CISA issue critical advisory ICSA-26-260-02 for GX Works3 and Motion Control Settings software enabling in-memory block password bypass and PLC logic tampering.
Mei-Lin Chen19 Sep 202612 min read
ThreatsIndustrial & OTCritical
Mitsubishi Electric CC-Link IE TSN Protocol Flaws Expose Factory Automation Cells
CISA issues ICS-CERT advisory ICSA-26-211-07 warning of critical protocol implementation flaws in Mitsubishi Electric CC-Link IE TSN industrial controllers.
Tom Verhoeven18 Sep 202610 min read