https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T21:19:39.808463+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05424 bdu:2022-05424 2026-10-14T21:19:39.812439+00:00 bdu:2022-05424 https://cve.radiocsirt.org/vuln/euvd-2026-13726 EUVD-2026-13726 2026-10-14T21:19:39.812472+00:00 EUVD-2026-13726 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23129 fkie_cve-2022-23129 2026-10-14T21:19:39.812493+00:00

Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authentication information and to access the database illegally. This is because when configuration information of GridWorX, a database linkage function of GENESIS64 and MC Works64, is exported to a CSV file, the authentication information is saved in plaintext, and an attacker who can access this CSV file can gain the authentication information.

 https://cve.radiocsirt.org/vuln/ghsa-v8qm-c69g-x57q GHSA-v8qm-c69g-x57q 2026-10-14T21:19:39.812545+00:00

Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authentication information and to access the database illegally. This is because when configuration information of GridWorX, a database linkage function of GENESIS64 and MC Works64, is exported to a CSV file, the authentication information is saved in plaintext, and an attacker who can access this CSV file can gain the authentication information.

 https://cve.radiocsirt.org/vuln/gsd-2022-23129 gsd-2022-23129 2026-10-14T21:19:39.812603+00:00 gsd-2022-23129 https://cve.radiocsirt.org/vuln/icsa-22-020-01 ICSA-22-020-01 — Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric HMI SCADA (Update B) 2026-10-14T21:19:39.812615+00:00

Information disclosure vulnerability due to Improper Neutralization of Input During Web Page Generation (CWE-79) caused by the lack of proper input verification exists in Mitsubishi Electric Iconics Digital Solutions GENESIS64 and ICONICS Suite and Mitsubishi Electric MC Works64. Authentication bypass vulnerability due to Incomplete List of Disallowed Inputs (CWE-184) exists in Mitsubishi Electric Iconics Digital Solutions GENESIS64 and ICONICS Suite Mitsubishi Electric GENESIS64, ICONICS Suite, and MC Works64. Information disclosure vulnerability due to Plaintext Storage of a Password (CWE-256) exists in Mitsubishi Electric Iconics Digital Solutions GENESIS64 and ICONICS Suite and Mitsubishi Electric GENESIS64, ICONICS Suite, and MC Works64. Denial-of-Service (DoS) vulnerability due to Buffer Over-read (CWE-126) exists in database server of Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS, and GENESIS32 Suite and Mitsubishi Electric GENESIS64, ICONICS Suite, GENESIS32, and MC Works64.