ZwickRoell Test Data Management versions prior to 3.0.8 contain a local file inclusion (LFI) vulnerability in the /server/node_upgrade_srv.js endpoint.
CVSS 4.0HIGH 8.7·Network·No auth·No interaction·EPSS 0.01024·Published 2026-03-16·Fixed in 3.0.8CWE-22