https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T19:32:16.445799+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-08219 cnvd-2022-08219 2026-10-15T19:32:16.450808+00:00 cnvd-2022-08219 https://cve.radiocsirt.org/vuln/euvd-2026-13740 EUVD-2026-13740 2026-10-15T19:32:16.450869+00:00 EUVD-2026-13740 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23127 fkie_cve-2022-23127 2026-10-15T19:32:16.450895+00:00

Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authentication information of an MC Works64 or MobileHMI and perform any operation using the acquired authentication information, by injecting a malicious script in the URL of a monitoring screen delivered from the MC Works64 server or MobileHMI server to an application for mobile devices and leading a legitimate user to access this URL.

 https://cve.radiocsirt.org/vuln/ghsa-3ccx-8rq3-28hx GHSA-3ccx-8rq3-28hx 2026-10-15T19:32:16.450941+00:00

Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authentication information of an MC Works64 or MobileHMI and perform any operation using the acquired authentication information, by injecting a malicious script in the URL of a monitoring screen delivered from the MC Works64 server or MobileHMI server to an application for mobile devices and leading a legitimate user to access this URL.

 https://cve.radiocsirt.org/vuln/gsd-2022-23127 gsd-2022-23127 2026-10-15T19:32:16.450976+00:00 gsd-2022-23127 https://cve.radiocsirt.org/vuln/icsa-22-020-01 ICSA-22-020-01 — Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric HMI SCADA (Update B) 2026-10-15T19:32:16.450996+00:00

Information disclosure vulnerability due to Improper Neutralization of Input During Web Page Generation (CWE-79) caused by the lack of proper input verification exists in Mitsubishi Electric Iconics Digital Solutions GENESIS64 and ICONICS Suite and Mitsubishi Electric MC Works64. Authentication bypass vulnerability due to Incomplete List of Disallowed Inputs (CWE-184) exists in Mitsubishi Electric Iconics Digital Solutions GENESIS64 and ICONICS Suite Mitsubishi Electric GENESIS64, ICONICS Suite, and MC Works64. Information disclosure vulnerability due to Plaintext Storage of a Password (CWE-256) exists in Mitsubishi Electric Iconics Digital Solutions GENESIS64 and ICONICS Suite and Mitsubishi Electric GENESIS64, ICONICS Suite, and MC Works64. Denial-of-Service (DoS) vulnerability due to Buffer Over-read (CWE-126) exists in database server of Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS, and GENESIS32 Suite and Mitsubishi Electric GENESIS64, ICONICS Suite, GENESIS32, and MC Works64.