CVE-2026-16438

GENESIS64
20/100
predicted likelihood
CVSS9.4
EPSS0.2%
KEVNone
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC Works64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, and Mobile
EPSS 0.002 (probability of exploitation) · CVSS base 9.4 · 1 public PoC/exploit reference(s) available
Public PoC / Exploit1

Defensive review only — these references demonstrate exploitability.

References2
Mentions 1