TI-2026-68266 CVE-2026-102262 · GHSA-gmvp-63rm-744w
Path traversal in Newell Brands DYMO ID lets attackers run code
Priority LOW 32
Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory.
Vulnerabilities
3 records
TI-2026-68265 CVE-2026-101893 · GHSA-697x-p8qh-gqqh
XML external entity flaw in Newell Brands DYMO ID file parsing
Priority LOW 22
Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load() without disabling DTD processing.
TI-2026-53653 CVE-2026-76796 · GHSA-4787-p38v-r57j
Newell Brands DYMO Connect Desktop improper file path validation
Priority MEDIUM 56
The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafted path to read arbitrary image files from the host…