ZwickRoell GmbH & Co. KG vulnerabilities

🔔 Create alert RSS

Published CVEs affecting ZwickRoell GmbH & Co. KG products: 1 record(s), with severity, exploitation and fixes.

Test Data Management 1

Exploited only (KEV) →

CVE-2026-29522 High · 8.7 CWE-22 Mar 16, 2026

ZwickRoell Test Data Management < 3.0.8 Path Traversal LFI

ZwickRoell Test Data Management versions prior to 3.0.8 contain a local file inclusion (LFI) vulnerability in the /server/node_upgrade_srv.js endpoint. An unauthenticated attacker can supply directory traversal sequences via the firmware parameter to access arbitrary files on the server, leading to information disclosure of sensitive system files.