CVE-2026-111855
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1
- Risk score
- 58/100
- CVSS
- 7.5 v3.1
- Exploit chance (30 days)
- 0.5%
- Published
- 17 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. Insufficient validation of user-supplied file paths allows remote attackers to read arbitrary files accessible to the application. Depending on configuration, ex…
- Affected
- See advisory
- Fix
- Upgrade the product to 1.21.1 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 7.5 high
- Remotely exploitable without logging in
References
Original description
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. Insufficient validation of user-supplied file paths allows remote attackers to read arbitrary files accessible to the application. Depending on configuration, exploitation may be possible without authentication.
Last activity 17 Oct 2026. Patch Forecast updates every hour.