CVE-2026-111853: Tektronix 3 Series Mdo

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI command handler. Insufficient neutralization of user-supplied input allows remote attackers to execute arbitrary operating system commands with elevated privileges.

Affected products

• Tektronix 3 Series Mdo: before 1.21.1 (fixed in 1.21.1)

Published 2026-10-17. Last modified 2026-10-17.