TDM: Vulnerabilities Reported in Tomcat CVE-2026-66299 .

Products

• CA Test Data Manager (Data Finder / Grid Tools)

Issue/Introduction

Received the below vulnerability on Tomcat and it has to upgraded with 10.1.58 or later version.

CVE-2026-66299

 

 

Environment

TDM 5.0.x 

Tomcat 10.1.36

Cause

Security Note: CVE-2026-66299

• Details: This vulnerability specifically affects example files/code included in standard distributions of the component.

Resolution

Test Data Manager (TDM) Patch for CVE-2026-66299

Version: 5.0.62.0
Hotfix Download: TDMWeb-5.0.62.0.zip

 

• Security: Upgraded internal libraries (Tomcat 10.1.57) to address critical Tomcat vulnerabilities.
• Status: Not exploitable in Test Data Manager.
• Engineering Analysis: Engineering has analyzed the risk for CVE-2026-66299 based on Test Data Manager's specific packaging and implementation. Test Data Manager does not ship or include these vulnerable example files in any of its installation packages. Because the files required to exploit this vulnerability are never distributed with or used by the application, this is confirmed as a "false positive."