[ CVE-2026-111853 · Published 17 Oct 2026 ]
Vulnerability in Tektronix 3 Series MDO
CVSS 8.8
EPSS <1%No fix listed yet
[ Description ]Official description
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI command handler. Insufficient neutralization of user-supplied input allows remote attackers to execute arbitrary operating system commands with elevated privileges.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.