{"vulnerability": "CVE-2026-15688", "sightings": [{"uuid": "dca0a9e6-b25d-47c5-8502-1ca7c0ea2bb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15688", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117285560525551261", "content": "CVE-2026-15688 | Mitsubishi Electric GX Works3 (CVSS 9.2, CRITICAL): Local attackers can bypass authentication by modifying memory, risking control program compromise. No fix yet \u2014 restrict local access. #OffSeq #ICS #CVE202615688 https://radar.offseq.com/threat/cve-2026-15688-cwe-303-incorrect-implementation-of-authentication-algorithm-in-mitsubishi-electric-b35e18a6ba962469", "creation_timestamp": "2026-09-17T09:00:28.836657Z"}, {"uuid": "f130c2d7-2f01-4ea5-a7f3-74e5eb30b521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15688", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvpc3zoie72a", "content": "Mitsubishi Electric GX Works3 has a CRITICAL vuln (CVE-2026-15688, CVSS 9.2): local auth bypass lets attackers alter control programs. Limit local access until mitigation is released. #OffSeq #ICS https://radar.offseq.com/threat/cve-2026-15688-cwe-303-incorrect-implementation-of-authentication-al...", "creation_timestamp": "2026-09-17T09:00:31.358662Z"}, {"uuid": "48dd2417-9c4c-4175-bd49-ee8b3548b9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15688", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvpeuptr3k2f", "content": "CVE-2026-15688 - gx works3\nThe GX Works3 engineering software and the Motion Control Setting tool on Mitsubishi Electric devices can be tricked into accepting an incorrect password when run locally. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gxworks3 #CVE #infosec", "creation_timestamp": "2026-09-17T09:50:06.607880Z"}, {"uuid": "306f111f-6011-4f28-8b15-68a539aa0053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15688", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvpftae22t2y", "content": "\ud83d\udea8 CVE-2026-15688 \u2014 CVSS 9.2 CRITICAL\n\nIncorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Mot...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-15688\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T10:07:10.584269Z"}, {"uuid": "c7ac67a2-8175-46cc-8717-baf6d7b467d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15688", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvqh44p2wv2v", "content": "~Cisa~\nLocal attackers can bypass block passwords and alter or destroy control programs.\n-\nIOCs: CVE-2026-15688\n-\n#CVE202615688 #ICS #ThreatIntel", "creation_timestamp": "2026-09-17T20:02:42.035492Z"}]}