[ CVE-2026-111855 · Published 17 Oct 2026 ]
Vulnerability in Tektronix 3 Series MDO
CVSS 7.5
EPSS <1%No fix listed yet
[ Description ]Official description
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. Insufficient validation of user-supplied file paths allows remote attackers to read arbitrary files accessible to the application. Depending on configuration, exploitation may be possible without authentication.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.