CVE-2026-111853

An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI command handler. Insufficient neutralization of user-supplied input allows remote attackers to execute arbitrary operating system commands with elevated privileges.

• CWE-78

• https://download.tek.com/document/TEK-PSA-002-092026.pdf
• https://www.tek.com/en/products/oscilloscopes/3-series-mdo

Published

Oct 17, 2026

Last Modified

Oct 17, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11181Inappropriate implementation in Media Session in Google Chro…6.3
• CVE-2026-11182Inappropriate implementation in SVG in Google Chrome prior t…6.5
• CVE-2026-111823Mage OSS through 0.9.80 before 76c4f46 can proceed with sess…9.8
• CVE-2026-11183Out of bounds read in GWP-ASan in Google Chrome prior to 149…6.5
• CVE-2026-11184Insufficient policy enforcement in Actor in Google Chrome pr…6.3
• CVE-2026-11185Use after free in V8 in Google Chrome prior to 149.0.7827.53…8.1
• CVE-2026-111854An issue was discovered on Tektronix 3 Series MDO devices be…8.1
• CVE-2026-111855An issue was discovered on Tektronix 3 Series MDO devices be…7.5
• CVE-2026-11186Inappropriate implementation in CSS in Google Chrome prior t…6.1
• CVE-2026-111865A security flaw has been discovered in THU-MIG yoloe up to 4…5.3
• CVE-2026-111866A weakness has been identified in nemoTyrant manong up to 7c…7.3
• CVE-2026-111868A vulnerability was determined in datastax pulsar-jms up to …6.3