Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-102262 is a vulnerability in Newell Brands DYMO ID versions 1.5.1.71 up to but not including 1.6.0. The software resolves its plugin Modules directory relative to the process working directory. An attacker can exploit this by placing a malicious job file alongside malicious modules or DLLs, causing the process working directory to be set to the attacker's folder when the victim opens the file. This results in code execution at the victim's privilege level. The issue is fixed in version 1.6.0. Join the discussion | CVE Database V5 | 10/05/2026, 20:37:26 UTC Added: 10/05/2026, 21:23:12 UTC |
0 Newell Brands DYMO ID versions 1.5.1.71 up to but not including 1.6.0 contain an XML External Entity (XXE) vulnerability due to improper restriction of XML external entity references. The software parses job files using XmlDocument.Load() without disabling DTD processing, which can lead to server-side request forgery (SSRF), NTLMv2 credential capture, local file disclosure, or application crashes when processing crafted files on browsed network shares. This vulnerability is fixed in version 1.6.0. Join the discussion | CVE Database V5 | 10/05/2026, 20:36:21 UTC Added: 10/05/2026, 21:23:12 UTC |
Showing 1 to 2 of 2 results