CVE-2026-111854
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1
- Risk score
- 57/100
- CVSS
- 8.1 v3.1
- Exploit chance (30 days)
- 0.5%
- Published
- 17 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access commands.
- Affected
- See advisory
- Fix
- Upgrade the product to 1.21.1 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 8.1 high
References
Original description
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access commands.
Last activity 17 Oct 2026. Patch Forecast updates every hour.