CVE-2026-101893

MediumCVSS 4.4

Published: 05/10/2026(UTC)Updated: 11/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load() without disabling DTD processing. The PC Job Files view automatically parses every recognized job file extension on folder browse. A crafted file on any browsed network share can perform SSRF, capture NTLMv2 credentials, read local files, or crash the process. Fixed in 1.6.0.

Risk Assessment

An attacker could exploit the vulnerability to steal credentials, read local files, or perform SSRF attacks, potentially leading to confidentiality and integrity breaches.

Recommendation

Update DYMO ID to version 1.6.0 or later, which includes the fix.

Other vulnerabilities in DYMO ID

CVE-2026-102262High
Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside malicious modules / DLL that sets the process working directory to the job file's folder when a victim clicks on the file, resulting in code execution at the victim's privilege level.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS