Remediation for CVE-2026-8924 Vulnerability in Test Data Manager (TDM) libcurl.dll

Products

• CA Test Data Manager (Data Finder / Grid Tools)

Issue/Introduction

Security scans identify a vulnerability (CVE-2026-8924) associated with the libcurl.dll file found in the TDM DataMaker installation directory (typically C:\Program Files (x86)\Grid-Tools\GTDatamaker\).

Environment

• Product: Broadcom Test Data Manager (TDM)
• Component: DataMaker (Grid-Tools)
• Flagged File: libcurl.dll

Cause

The libcurl.dll file identified by security scanners is a component of the PowerBuilder runtime libraries, which form the underlying platform for the TDM DataMaker application. Broadcom does not maintain or distribute direct patches for these 3rd-party PowerBuilder runtime files. Consequently, an automated update patch is not available.

Resolution

To remediate this vulnerability, one of the following manual actions is required:

1. Manual Update: If the functionality provided by libcurl.dll is required for your TDM operations, manually replace the existing library with an updated, secured version compatible with your environment.
2. Removal: If the library is not actively utilized by your specific implementation, it is safe to remove or delete the file from the installation directory.

Important: Before performing any deletion or replacement, you must create a backup copy of the original libcurl.dll file. This ensures that you can revert the change if your TDM functionality is impacted.