CVE-2026-111855
CVE-2026-111855
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. Insufficient validation of user-supplied file paths allows remote attackers to read arbitrary files accessible to the application. Depending on configuration, exploitation may be possible without authentication.
CVSS 7.5 · High · EPSS 0.6% · Fix available
- Published
- Updated
Affected products and versions
3 series mdo
- Versions
- ≥ 0, < 1.21.1: Affected (semver)
Update to 1.21.1