CVE-2026-21268
Improper Input Validation in Adobe Dreamweaver Enables Code Execution
Publication date: 2026-01-13
Last updated on: 2026-01-13
Assigner: Adobe Systems Incorporated
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| adobe | dreamweaver | to 21.6 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Improper Input Validation issue in Dreamweaver Desktop versions 21.6 and earlier. It allows an attacker to execute arbitrary code with the privileges of the current user if the user opens a specially crafted malicious file. The scope of the vulnerability changes upon exploitation, and user interaction is required.
How can this vulnerability impact me? :
If exploited, this vulnerability can lead to arbitrary code execution on your system with the same privileges as the current user. This could result in unauthorized access, data modification, or other malicious activities performed by an attacker.