MobileHMI vulnerabilities

6 known vulnerabilities in MobileHMI from Mitsubishi Electric Iconics Digital Solutions. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  GENESIS64: Incorrect Privilege Assignment

  CVE-2026-16438Oct 15, 2026Mitsubishi Electric

  Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC

• 7.1 High severity

  GENESIS: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2026-16437Oct 15, 2026Mitsubishi Electric

  Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX

• 9.2 Critical severity

  GENESIS: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2026-16436Oct 15, 2026Mitsubishi Electric

  Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX

• 9.3 Critical severity

  GENESIS64: Cleartext Storage of Sensitive Information in GUI

  CVE-2025-14816Apr 8, 2026Mitsubishi Electric

  Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Elec

• 9.3 Critical severity

  GENESIS64: Cleartext Storage of Sensitive Information

  CVE-2025-14815Apr 8, 2026Mitsubishi Electric

  Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hy

• 8.2 High severity

  GENESIS64: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-11774Dec 19, 2025Mitsubishi Electric

  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software keyboard function (hereinafter referred to as "keypad function") of Mitsubishi Electric GENESIS64 versions 10.97.2 CFR3 and prior, Mitsubis