Mitsubishi Electric GX Works3 and Motion Control Settings

A high-severity authentication implementation vulnerability (CVE-2026-15688, CVSS v3 8.8) in Mitsubishi Electric GX Works3 and its Motion Control Settings can allow a local attacker executing the product to authenticate with an invalid block password and modify parts of the executable in memory, potentially allowing viewing, tampering, or destruction of control programs; Mitsubishi and CISA advise applying provided patched versions (GX Works3 >= 1.096A, Motion Control Settings >= 1.070Y), using network segmentation, restricting remote access, and other mitigations to reduce exploitation risk.