Improper Input Validation in Adobe Dreamweaver Enables Code Execution

Publication date: 2026-01-13

Last updated on: 2026-01-13

Assigner: Adobe Systems Incorporated

Description

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is changed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-13

Last Modified

2026-01-13

Generated

2026-07-06

AI Q&A

2026-01-14

EPSS Evaluated

2026-07-05

NVD

CVE-2026-21268

EUVD

EUVD-2026-2052

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	dreamweaver	to 21.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Input Validation issue in Dreamweaver Desktop versions 21.6 and earlier. It allows an attacker to execute arbitrary code with the privileges of the current user if the user opens a specially crafted malicious file. The scope of the vulnerability changes upon exploitation, and user interaction is required.

Impact Analysis

If exploited, this vulnerability can lead to arbitrary code execution on your system with the same privileges as the current user. This could result in unauthorized access, data modification, or other malicious activities performed by an attacker.

Hi! I’m here to help you understand CVE-2026-21268. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70