Public preview. Built from real public data on November 9, 2026, 5:41 AM UTC.
Securidigm Watch Transportation cyber intel
Home / Items
Industrial control advisorySeverity 8.8 high

Mitsubishi Electric GX Works3 and Motion Control Settings

ICSA-26-260-02 · CISA · September 17, 2026

Summary

Successful exploitation of this vulnerability could allow a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modify part of the executable module in memory, and thereby allows the attacker to view, tamper with, destroy, or delete control programs.

From CISA, quoted as published. Check the source before acting.

What to do

For customers using GX Works3, please download version 1.096A or later from the link https://www.mitsubishielectric.com/fa/download/software/detailsearch.page?mode=software&kisyu=/plceng&shiryoid=1000001411&lang=2&select=0&softid=1&infostatus=1_2_1&viewradio=0&viewstatus=&viewpos=, install it, and set the security version for projects to "2". Please refer to “15.9 Preventing Illegal Access to/Falsification of Data (Security Version)” in “GX Works3 Operating Manual” for details. For more information about the workaround, refer to the Mitsubishi Electric security advisory available at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2026-007_en.pdf". For customers using Motion Control Settings (Software packaged with GX Works3), Please download version 1.070Y or later from the link "https://www.mitsubishielectric.com/fa/download/software/detailsearch.page?mode=software&kisyu=/ssc&shiryoid=1000000803&lang=2&select=0&softid=1&infostatus=1_8_1&viewradio=0&viewstatus=&viewpos=", install it, and set the security version for projects to "2". Please refer to “12.5 Preventing Illegal Access to/Falsification of Data (Security Version)” in “Motion Control Setting Function Help” for details. For more information about the workaround, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2026-007_en.pdf". For customers of the affected products, Mitsubishi Electric recommends using a computer with the affected product within a LAN and blocking remote logins from untrusted networks, hosts, and users, to minimize the risk of exploiting this vulnerability. For customers of the affected products, Mitsubishi Electric recommends using a firewall, virtual private network (VPN), etc., to prevent unauthorized access, and allowing remote login only to trusted users when connecting a computer with the affected product to the Internet, to minimize the risk of exploiting this vulnerability. For customers of the affected products, Mitsubishi Electric recommends preventing the user from clicking on web links contained in emails or other messages from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability. For customers of the affected products, Mitsubishi Electric recommends installing antivirus software on a computer running the affected product, to minimize the risk of exploiting this vulnerability. For customers of the affected products, Mitsubishi Electric recommends restricting physical access to a computer on which the affected product is installed, as well as to computers and network devices that can communicate with it, to minimize the risk of exploiting this vulnerability.

Vendor fix or mitigation, quoted from the advisory.

Each CVE in this advisory

CVESeverityKnown exploitedExploit likelihoodWeakness
CVE-2026-156888.8 highNo0.2%Incorrect Implementation of Authentication Algorithm (CWE-303)

Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).

Affected products

VendorProductAffected versionsFixed
Mitsubishi ElectricMitsubishi Electric GX Works3vers:all/*—
Mitsubishi ElectricMitsubishi Electric Motion Control Settings (Software packaged with GX Works3)vers:all/*—

Why it's on these mode pages

  • Maritime: Vendor table: Mitsubishi Electric (industrial control makers used in every mode, all modes) (matched by rule)
  • Pipeline: Vendor table: Mitsubishi Electric (industrial control makers used in every mode, all modes) (matched by rule)
  • Freight rail: Vendor table: Mitsubishi Electric (industrial control makers used in every mode, all modes) (matched by rule)
  • Passenger rail and transit: Vendor table: Mitsubishi Electric (industrial control makers used in every mode, all modes) (matched by rule)
  • Highway and motor carrier: Vendor table: Mitsubishi Electric (industrial control makers used in every mode, all modes) (matched by rule)
  • Postal and parcel: Vendor table: Mitsubishi Electric (industrial control makers used in every mode, all modes) (matched by rule)

Change history

  1. September 17, 2026: Initial Publication
  2. September 17, 2026: Initial CISA Republication of Mitsubishi Electric 2026-007 advisory
  3. November 9, 2026: First collected by Watch

Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com