CVE-2026-111855

An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. Insufficient validation of user-supplied file paths allows remote attackers to read arbitrary files accessible to the application. Depending on configuration, exploitation may be possible without authentication.

• CWE-22

• https://download.tek.com/document/TEK-PSA-002-092026.pdf
• https://www.tek.com/en/products/oscilloscopes/3-series-mdo

Published

Oct 17, 2026

Last Modified

Oct 17, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-111823Mage OSS through 0.9.80 before 76c4f46 can proceed with sess…9.8
• CVE-2026-11183Out of bounds read in GWP-ASan in Google Chrome prior to 149…6.5
• CVE-2026-11184Insufficient policy enforcement in Actor in Google Chrome pr…6.3
• CVE-2026-11185Use after free in V8 in Google Chrome prior to 149.0.7827.53…8.1
• CVE-2026-111853An issue was discovered on Tektronix 3 Series MDO devices be…8.8
• CVE-2026-111854An issue was discovered on Tektronix 3 Series MDO devices be…8.1
• CVE-2026-11186Inappropriate implementation in CSS in Google Chrome prior t…6.1
• CVE-2026-111865A security flaw has been discovered in THU-MIG yoloe up to 4…5.3
• CVE-2026-111866A weakness has been identified in nemoTyrant manong up to 7c…7.3
• CVE-2026-111868A vulnerability was determined in datastax pulsar-jms up to …6.3
• CVE-2026-111869A vulnerability was identified in makeplane plane up to 1.4.…5.3
• CVE-2026-11187Inappropriate implementation in Glic in Google Chrome prior …6.3