Live › vulnerability › CVE-2026-111853
Go to dashboardTektronix 3 Series MDO oscilloscopes before firmware 1.21.1 have an OS command injection flaw in the FILESystem:MOUNT:DRIve SCPI command. A remote attacker can run arbitrary operating system commands on the device with elevated privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the firmware version on the scope (unknown for the exact menu path in the sources); any unit reporting a version below 1.21.1 is exposed.
1.21.1 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI command handler. Insufficient neutralization of user-supplied input allows remote attackers to execute arbitrary operating system commands with elevated privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-111853")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.