What’s Vulnerable › Vulnerabilities

CVE-2026-111854

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-17 · updated 2026-10-19
• Weakness: CWE-22

Description

An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access commands.

Affected products

• Tektronix 3 Series MDO: before 1.21.1 — fixed in 1.21.1

How to fix

Upgrade to a fixed version: Tektronix 3 Series MDO 1.21.1. Check the vendor advisory for mitigations.

References

• https://download.tek.com/document/TEK-PSA-002-092026.pdf
• https://www.tek.com/en/products/oscilloscopes/3-series-mdo

Get alerted when CVE-2026-111854 or the next vulnerability affects your stack