What is GHSA-wr4m-ffvp-986p?

GHSA-wr4m-ffvp-986p is a security advisory published by GitHub Security Advisories with High severity. An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal...

Which CVE IDs does GHSA-wr4m-ffvp-986p cover?

GHSA-wr4m-ffvp-986p covers the following CVE IDs: CVE-2026-111854. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wr4m-ffvp-986p?

GHSA-wr4m-ffvp-986p has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

GHSA-wr4m-ffvp-986pHighCVSS 8.1

An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal...

Vendor

GitHub Security Advisories

Published

October 17, 2026

Last Modified

October 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-111854 →

📋 Description

An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access commands.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-111854
https://download.tek.com/document/TEK-PSA-002-092026.pdf
https://www.tek.com/en/products/oscilloscopes/3-series-mdo
https://github.com/advisories/GHSA-wr4m-ffvp-986p