Vulnerability · Published Sep 15, 2026 · Assigned by cisa-cg

CVE-2026-76796Newell Brands DYMO Connect Desktop improper file path validation

Medium 4.0

In plain English

A medium-severity security flaw in DYMO Connect Desktop from Newell Brands. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).

Severity (CVSS 3.1)4.0Medium

Exploit odds (30 days)0.2%top 92.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafted path to read arbitrary image files from the host filesystem outside the intended scope. Fixed in 1.6.2. The fix limits access by file extension only, not by directory - arbitrary-location reads of files with an allowed image extension remain possible by design (accepted residual risk).

Affected products (as reported)

Vendor	Product	Versions
Newell Brands	DYMO Connect Desktop	0 – before 1.6.2

Weakness: CWE-73 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

url release-notes
url patch
url vdb-entry
url third-party-advisory