CVE-2026-111854: Path Traversal
Published Oct 17, 2026
·Updated
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access commands.
Affected Software
1 affected component
Tektronix 3 Series MDO<1.21.1
Event History
Oct 17, 2026
CVE Published
via MITRE·02:08 AM
Data Sourced
via MITRE·02:08 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which devices are affected?
Tektronix 3 Series MDO devices running firmware versions before 1.21.1 are affected.
2
What level of access does an attacker need?
An attacker needs remote access to the device's SCPI FILESystem command interface and low-level privileges. No user interaction is required.
3
What could an attacker do by exploiting this issue?
An attacker can supply crafted file paths to read or modify arbitrary files on the device.