Is CVE-2026-111855 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-111855?

CVE-2026-111855 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-111855

Description

An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. Insufficient validation of user-supplied file paths allows remote attackers to read arbitrary files accessible to the application. Depending on configuration, exploitation may be possible without authentication.