Critical vulnerabilities found in Mitsubishi Electric industrial software suites
In short: Mitsubishi Electric has released security updates to address multiple vulnerabilities across several industrial automation products, including GENESIS64 and the ICONICS Suite. These flaws could allow attackers to execute arbitrary code, bypass authentication, or cause denial-of-service conditions.
This summary was generated automatically by AI from CISA Advisories's publication. It is our own text, not a copy of the original — facts, figures and quotes belong to the source, linked above and below.
What changed?
- 1Fixed CVE-2023-4863 (Out-of-bounds Write in libwebp component).
- 2Addressed authentication bypass vulnerabilities (CVE-2026-16436, CVE-2026-16437).
- 3Resolved arbitrary operation vulnerability (CVE-2026-16438).
- 4Released version 10.97.3 or later for impacted products.
Why it matters
If your infrastructure relies on these ICS/SCADA systems, you are at risk of unauthorized system control or data tampering. Immediate patching to version 10.97.3 or later is critical to securing your operations.
What it means for AI agents and contact centers
While these specific industrial products are outside the primary voice AI stack, ensure your team audits any integrated OT or legacy SCADA systems in your data centers for these versions to prevent lateral network exploitation.
Sources
- CISA AdvisoriesOfficialPrimary sourceOriginal article →„Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz“27 Oct 2026, 14:00Licence: US federal government work (17 U.S.C. §105) · our summary (content changed)
- Published by source
- 27 Oct 2026, 14:00
- Found by our system
- 27 Oct 2026, 18:22
- Summary generated
- 27 Oct 2026, 22:22
This article was written by AI from the original source. Facts, numbers and prices come from the source; missing values are marked “Not specified”. Legal notice, copyright and privacy