CVE-2026-101893CWE-611xxe

CVE-2026-101893

Medium · published October 6, 2026

CVSS v3.1
4.4
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load() without disabling DTD processing. The PC Job Files view automatically parses every recognized job file extension on folder browse. A crafted file on any browsed network share can perform SSRF, capture NTLMv2 credentials, read local files, or crash the process. Fixed in 1.6.0.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
5.1 · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:N
EPSS
0.00154 · 4.1th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2026-10-06T01:16Z
References (4)
https://mediaserver.newellrubbermaid.com/industrial/Help/win/en/Content/What's%20New.htm · 9119a7d8-5eab-497f-8521-727c672e3725https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-275-01.json · 9119a7d8-5eab-497f-8521-727c672e3725https://www.cve.org/CVERecord?id=CVE-2026-101893 · 9119a7d8-5eab-497f-8521-727c672e3725https://www.dymo.com/support?cfid=user-guide · 9119a7d8-5eab-497f-8521-727c672e3725
EPSS history
Timeline
  • 12 OCT 03:26Z
    EPSS moved — → 0%
    epss
  • 05 OCT 20:36Z
    Newell Brands DYMO ID document parsing failing file type extension authentication check
    cvelistv5
  • 05 OCT 20:36Z
    Newell Brands DYMO ID document parsing failing file type extension authentication check
    cvelistv5