CVE-2026-102262
HIGH
NVD
CVSS Score
7.3
Severity
HIGH
Published
Oct 05, 2026
Vendor
unknown
Description
Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside malicious modules / DLL that sets the process working directory to the job file's folder when a victim clicks on the file, resulting in code execution at the victim's privilege level. Fixed in 1.6.0.