CISA published an ICS advisory for Mitsubishi Electric GX Works3 and the bundled Motion Control Settings software, both affected across all versions by CVE-2026-15688 (CVSS v3 8.8). The flaw stems from an incorrect implementation of the authentication algorithm (CWE-303), allowing a local attacker to authenticate successfully even with an invalid block password by running the product and modifying part of the executable module in memory.
Once past the flawed authentication check, an attacker can view, tamper with, destroy, or delete control programs — a serious concern for critical manufacturing environments where these engineering tools configure PLC and motion control logic.
What to take away: This is an authentication-bypass weakness in an OT engineering workstation product rather than an AD/domain issue, but it reinforces the same lesson — weak or bypassable credential validation on privileged tooling undermines the entire trust model. Restrict local access to engineering workstations and apply vendor mitigations promptly.