Vendors and CVEs › CVEs › CVE-2026-16436
CVE-2026-16436: what it is, who is affected and what to do
Flaws in Mitsubishi Electric's ICONICS-based software could let an attacker run code (CVE-2023-4863), bypass authentication (CVE-2026-16436, CVE-2026-16437) or perform arbitrary operations (CVE-2026-16438). Effects include data tampering and denial of service.
- Scores and exploitation. The stories below cover this flaw together with others, so the Brief does not give its scores here: check the records below.
- Records. CVE-2026-16436 on the National Vulnerability Database · CISA’s known exploited catalog
The story
Critical Known exploited
Mitsubishi Electric ICONICS and GENESIS software has flaws allowing code execution and login bypass
Flaws in Mitsubishi Electric's ICONICS-based software could let an attacker run code (CVE-2023-4863), bypass authentication (CVE-2026-16436, CVE-2026-16437) or perform arbitrary operations (CVE-2026-16438).