Valmet
4 CVEs across 3 Valmet products. Browse Valmet vulnerabilities, severities, and proof-of-concept exploits.
Valmet products with known CVEs
Valmet CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-15577 | High | 7.5 | 2026-02-12 | An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C… |
CVE-2025-0418 | | | 2025-04-01 | Valmet DNA user passwords in plain text. This practice poses a security risk as attackers who gain access to local project data can read the passwords. |
CVE-2025-0417 | | | 2025-04-01 | Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts withou… |
CVE-2025-0416 | | | 2025-04-01 | Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions th… |
CVE-2021-26726 | High | 8.8 | 2022-02-16 | A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges… |