CVE-2021-26726

Valmet DNA versions from Collection 2012 through Collection 2021 are affected by CVE-2021-26726, a remote code execution vulnerability in a Valmet DNA service listening on TCP port 1517. The root cause is inadequate encryption strength and lack of authentication, enabling an unauthenticated netwo...

CVE-2025-15577

CVE-2025-15577 : An unauthenticated attacker can exploit a URL manipulation vulnerability to achieve arbitrary file read on Valmet DNA Web Tools: C2022 and older. The CVE is rated CRITICAL (CVSSv4.0: AV:N/AC:L/PR:N/UI:N/S:U/VI:N/VC:H/VS:N/VA:N/AT:N/AC:H/E:P) with network access, low complexity, a...