Newell Brands

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Newell Brands records in CISA KEV

No Newell Brands vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-53653 CVE-2026-76796 · GHSA-4787-p38v-r57j

Newell Brands DYMO Connect Desktop improper file path validation

MEDIUM 56

The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafted path to read arbitrary image files from the host…

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00176 Published 2026-09-15 Fixed in 1.6.2 CWE-73

TI-2026-68266 CVE-2026-102262 · GHSA-gmvp-63rm-744w

Path traversal in Newell Brands DYMO ID lets attackers run code

LOW 32

Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory.

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.00211 Published 2026-10-05 Fixed in 1.6.0 CWE-22

TI-2026-68265 CVE-2026-101893 · GHSA-697x-p8qh-gqqh

XML external entity flaw in Newell Brands DYMO ID file parsing

LOW 22

Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load() without disabling DTD processing.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00154 Published 2026-10-05 Fixed in 1.6.0 CWE-611

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0