CVE-2021-26726

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012 until Collection 2021.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78 CWE-209 CWE-272 CWE-305 CWE-330

Affected software

Vendor	Product	Versions
Valmet DNA	Valmet DNA	>= Collection 2012, < Collection 2021

References

https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26726/Third Party Advisory
https://www.valmet.com/about-us/research-and-development/vulnerabilityadvisories/Vendor Advisory
https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26726/Third Party Advisory
https://www.valmet.com/about-us/research-and-development/vulnerabilityadvisories/Vendor Advisory

Timeline

Published: Feb 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-267279.8Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow an CVE-2021-267289.8Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to ex CVE-2021-267299.8Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow an a CVE-2021-267309.8A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to exe CVE-2021-267319.8Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_restservice allow an aut CVE-2021-267325.3A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker to arbitrarily change the net CVE-2021-267337.5A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to arbitrarily send rebo CVE-2021-267345.5Zscaler Client Connector Installer on Windows before version 3.4.0.124 improperly handled directory junctions during uninstallation. A local CVE-2021-267357.8The Zscaler Client Connector Installer and Unsintallers for Windows prior to 3.6 had an unquoted search path vulnerability. A local adversar CVE-2021-267367.8Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries fr CVE-2021-267374.7The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileg CVE-2021-267387.8Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be ab