CVE Program partner

Mitsubishi

Mitsubishi Electric Corporation

API
CVEs, 365 days21148 all time, 8 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationMitsubishi Electric Corporation
RoleCNA
TypeVendor
Reports tojpcert → mitre
ScopeVulnerabilities related to products of Mitsubishi Electric Group.
Advisorieshttps://www.mitsubishielectric.com/psirt/vulnerability/index.html

Latest CVEs · RSS

  • CVE-2026-16438 2026-10-15 · CVSS 9.4
    Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Histor
  • CVE-2026-16437 2026-10-15 · CVSS 7.1
    Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and pr
  • CVE-2026-16436 2026-10-15 · CVSS 9.2
    Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and pr
  • CVE-2026-15688 2026-09-17 · CVSS 9.2
    Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to succes
  • CVE-2026-13584 2026-07-30 · CVSS 7.1
    Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, M
  • CVE-2026-8806 2026-06-19 · CVSS 8.7
    Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacke
  • CVE-2026-8805 2026-06-19 · CVSS 8.7
    Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Electric MELSEC iQ-F Series FX5-EIP EtherNet/IP module FX5-EIP versions 1
  • CVE-2026-5667 2026-06-17 · CVSS 7.2
    Use of Hard-coded Credentials vulnerability in Mitsubishi Electric Room Air Conditioners (for Japan and outside Japan); Wireless LAN Adapters for Room Air Condi
  • CVE-2025-14816 2026-04-08 · CVSS 9.3
    Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite v
  • CVE-2025-14815 2026-04-08 · CVSS 9.3
    Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions
  • CVE-2025-2399 2026-03-10 · CVSS 5.9
    Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric CNC M800V Series M800VW and M800VS, M80V Series M80V a
  • CVE-2026-1876 2026-03-03 · CVSS 8.7
    Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions a
  • CVE-2026-1875 2026-03-03 · CVSS 8.7
    Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and
  • CVE-2026-1874 2026-03-03 · CVSS 8.7
    Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP version
  • CVE-2025-15080 2026-02-05 · CVSS 8.8
    Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric MELSEC iQ-R Series R08PCPU, R16PCPU, R32PCPU, and R120PCPU allows an una
  • CVE-2025-10314 2026-02-05 · CVSS 8.8
    Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation FREQSHIP-mini for Windows versions 8.0.0 to 8.0.2 allows a local attacker to exec
  • CVE-2025-11774 2025-12-19 · CVSS 8.2
    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software keyboard function (hereinafter referred
  • CVE-2025-11009 2025-12-17 · CVSS 5.1
    Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GT Designer3 Version1 (GOT2000) all versions and Mitsubishi Electric GT Designer
  • CVE-2025-3784 2025-11-27 · CVSS 5.5
    Cleartext Storage of Sensitive Information Vulnerability in GX Works2 all versions allows an attacker to disclose credential information stored in plaintext fro
  • CVE-2025-10089 2025-11-18 · CVSS 7.7
    Uncontrolled Search Path Element Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S Setting Application all versions, MILCO.
  • CVE-2025-10259 2025-11-06 · CVSS 5.3
    Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module
  • CVE-2025-8531 2025-09-19 · CVSS 6.8
    Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, Q06UDVCPU, Q13UDVCPU,
  • CVE-2025-7731 2025-09-01 · CVSS 7.5
    Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated a
  • CVE-2025-7405 2025-09-01 · CVSS 7.3
    Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated atta
  • CVE-2025-5514 2025-08-25 · CVSS 5.3
    Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows

All CVE Program partners