Live › vulnerability › CVE-2026-111855
Go to dashboardTektronix 3 Series MDO oscilloscopes before firmware 1.21.1 have a path traversal flaw in their web management interface. A remote attacker can read arbitrary files the application can access, and depending on configuration this may not require logging in.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run Tektronix 3 Series MDO devices with the web management interface enabled. Exposure is greater if the interface is reachable from the internet or untrusted networks, and if authentication is not required by configuration. Devices kept off the network or running firmware 1.21.1 or later are not affected.
No product ranges from the sources yet.
1.21.1 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. Insufficient validation of user-supplied file paths allows remote attackers to read arbitrary files accessible to the application. Depending on configuration, exploitation may be possible without authentication.
This page as .md · .json · in your agent: get_signal("CVE-2026-111855")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.