PatchSiren

Tektronix CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Tektronix CVE published 2026-10-17

CVE-2026-111855

A path traversal vulnerability exists in the web management interface of Tektronix 3 Series MDO devices before 1.21.1. This allows remote attackers to read arbitrary files accessible to the application, potentially without authentication, depending on configuration. The vulnerability has a CVSS score of 7.5 and is considered high-severity. Defenders should assess potential exposure and prioritize verifica [truncated]

HIGH Tektronix CVE published 2026-10-17

CVE-2026-111854

A path traversal vulnerability was discovered on Tektronix 3 Series MDO devices before 1.21.1, allowing remote attackers to read or modify arbitrary files through insufficient validation of file paths in the SCPI FILESystem command interface. This vulnerability has significant implications for device security, as it could enable attackers to access sensitive information or disrupt device operation. Defend [truncated]

HIGH Tektronix CVE published 2026-10-17

CVE-2026-111853

CVE-2026-111853 is an OS command injection vulnerability in the FILESystem:MOUNT:DRIve SCPI command handler of Tektronix 3 Series MDO devices before 1.21.1. The vulnerability allows remote attackers to execute arbitrary operating system commands with elevated privileges due to insufficient neutralization of user-supplied input. Defenders should assess exposure and prioritize verification of device version [truncated]