VulnSocial

CVE-2026-29522Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

ZwickRoell Test Data Management versions prior to 3.0.8 contain a local file inclusion (LFI) vulnerability in the /server/node_upgrade_srv.js endpoint. An unauthenticated attacker can supply directory traversal sequences via the firmware parameter to access arbitrary files on the server, leading to information disclosure of sensitive system files.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-03-17: 2Technical Details · 2026-03-17: 203-17
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-29522 ZwickRoell Test Data Management versions prior to 3.0.8 contain a local file inclusion (LFI) vulnerability in the /server/node_upgrade_srv.js endpoint. An unauthentic… https://www.cve.org/CVERecord?id=CVE-2026-29522

    Post summary

    The passage announces the LFI vulnerability (CVE-2026-29522) in ZwickRoell Test Data Management prior to version 3.0.8, citing the affected endpoint and version range, but gives no information on patches, exploits, or PoC.

    0000080
    56.7K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-29522 Local File Inclusion in ZwickRoell Test Data Management Before 3.0.8 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29522

    Post summary

    The text offers basic information on CVE‑2026‑29522—a Local File Inclusion issue in ZwickRoell Test Data Management—providing product details and a link to a vulnerability database, but it lacks any exploitation, PoC, or patch details.

    0000037
    4.0K followersView on X

Explore more

Back to dashboard