HIGHCVSS v3.1 8.1Vulnerability

CVE-2026-111854

An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access commands.

Properties

Severity
HIGH
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Epss score
0.00391
Cvss severity
HIGH
Cvss score
8.1
Retrieved at
2026-10-21T01:24:48+00:00
Last source
FIRST EPSS
Score
8.1
Cvss version
3.1
Cve id
CVE-2026-111854
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
First seen by Signal
2026-10-18T13:39:03+00:00
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Published at
2026-10-17T02:17:18.750
Last modified
2026-10-19T22:17:03.853
Epss percentile
0.31768

Related Entities (1)

HAS_WEAKNESS (1)

→[Weakness]Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-111854 (CVSS v3.1 8.1) — Ninja Signal Threat Intelligence | Ninja Signal