CVE-2026-111855
Quick assessment
Affected
Tektronix 3 Series MDO
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Tektronix 3 系列 MDO 设备（版本早于 1.21.1）中发现了一个安全问题：设备的 Web 管理界面存在路径遍历漏洞。由于对用户提供的文件路径验证不足，远程攻击者可读取应用程序可访问的任意文件。根据具体配置，该漏洞可能在无需认证的情况下被利用。
Possible ATT&CK Techniques 3 AI
T1038 T1083 · File and Directory Discovery T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-111855
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. Insufficient validation of user-supplied file paths allows remote attackers to read arbitrary files accessible to the application. Depending on configuration, exploitation may be possible without authentication.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Tektronix | 3 Series MDO | 0 ~ 1.21.1 | - |
|
II. Public POCs for CVE-2026-111855
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-111855
请登录查看更多情报信息。
Other References for CVE-2026-111855 (2)
Same Patch Batch · Tektronix · 2026-10-17 · 3 CVEs total
| CVE-2026-111853 | 8.8 HIGH | Tektronix 3 Series MDO 1.21.1 前命令注入漏洞 |
| CVE-2026-111854 | 8.1 HIGH | Tektronix 3 系列 MDO 1.21.1 前路径遍历漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-22
-
CVE-2026-110268
Post Export Import with Media <= 1.17.2 - Authenticated (Adm -
CVE-2026-111854
Tektronix 3 系列 MDO 1.21.1 前路径遍历漏洞 -
CVE-2026-111635
Helical Insight through 7.0.0 Path Traversal via /getExterna -
CVE-2026-111618
CoAI through 4.0.0 Unauthenticated Path Traversal via Archiv -
CVE-2026-41582
countly-server: Unauthenticated Path Traversal via Public Im
V. Comments for CVE-2026-111855
No comments yet