[ CVE-2026-111854 · Published 17 Oct 2026 ]
Vulnerability in Tektronix 3 Series MDO
CVSS 8.1
EPSS <1%No fix listed yet
[ Description ]Official description
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access commands.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.