CVE-2026-111854: 3 Series MDO 0 to before 1.21.1

CVE-2026-111854. CVSS 3.1 base score 8.1 (HIGH, Vendor/CNA).

Affected technology

3 Series MDO · 0 to before 1.21.1
Tektronix

Description’s affected range: before 1.21.1

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Remote attackers can read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access commands. Vendor/CNA’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality and integrity impact as high; availability impact as none.

Published 17-Oct-2026 02:48 UTC

CWE: CWE-22
CCR priority: 32.4 /100 (P4)
CVSS 3.1: 8.1 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · Vendor/CNA
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-17 02:48:37.999478+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-111854.html