Vulnerabilities
Summary — last 7 days
New vulnerabilities4,948▲ 39 vs. last week
Critical / high2,111▼ 666 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)757▲ 649 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | High (7.5) | 0.49% | — | Tektronix 3 Series MDO DevicesAI | 10/17/2026 | 10/19/2026 | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. Insufficient validation of user-supplied file paths allows remote attackers to read arbitrary files accessible to the application. Depending on configuration,… | |
| Awaiting Analysis | High (8.1) | 0.39% | — | Tektronix 3 Series MDO DevicesAI | 10/17/2026 | 10/19/2026 | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access commands. | |
| Deferred | High (8.8) | 0.86% | — | Tektronix 3 Series MDO DevicesAI | 10/17/2026 | 10/19/2026 | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI command handler. Insufficient neutralization of user-supplied input allows remote attackers to execute arbitrary operating system commands with elevated privileges. |