Skip to content
OpenAdvisories

Vendor

Newell Brands

3 known vulnerabilities.

Products

DYMO ID 2 DYMO Connect Desktop 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-101893

    Newell Brands DYMO ID document parsing failing file type extension authentication check

    Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load() without disabling DTD processing. The PC Job Files view automatically parses every recognized job file extension on folder browse. A crafted file on any browsed network share can perform…

    Newell Brands DYMO ID
  • Medium 4.0
    CVE-2026-76796

    Newell Brands DYMO Connect Desktop improper file path validation

    The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafted path to read arbitrary image files from the host filesystem outside the intended scope.…

    Newell Brands DYMO Connect Desktop