Test Data Management CVE-2026-29522

Upgrade ZwickRoell Test Data Management to version 3.0.8 or later, which addresses the path traversal vulnerability according to the CVE scope statement. Organizations should verify the installed version and contact ZwickRoell support channels for patch distribution mechanisms, as the vendor's standard software page does not provide direct download links. Until patching is complete, implement network segmentation to restrict access to the /server/node_upgrade_srv.js endpoint exclusively from trusted management networks-block external and general corporate network access using firewall rules or reverse proxy ACLs targeting this specific URI path. Deploy web application firewall rules to detect and block directory traversal patterns (../, ..\, URL-encoded variants) in the firmware parameter, though this is a compensating control that may be bypassed and should not replace patching. Monitor web server access logs for requests to node_upgrade_srv.js containing traversal sequences as an indicator of exploitation attempts. If the node upgrade functionality is not operationally required, disable the endpoint entirely by removing or renaming the node_upgrade_srv.js file, though this may impact legitimate firmware update capabilities and should be coordinated with operational requirements.