PT-2026-2771 · Adobe · Dreamweaver Desktop

Jann Horn · Publicado 2026-01-13 · Atualizado 2026-01-13 · CVE-2026-21274

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.6 and earlier

Description Dreamweaver Desktop versions 21.6 and earlier are susceptible to an Incorrect Authorization issue. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. An attacker can bypass security measures and execute unauthorized code. User interaction is required for exploitation, specifically, a victim must open a malicious file.

Recommendations Update Dreamweaver Desktop to a version later than 21.6.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

BDU:2026-00725

CVE-2026-21274

Produtos afetados

Dreamweaver Desktop

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-21274 · Nota de Segurança
• https://helpx.adobe.com/security/products/dreamweaver/apsb26-01.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-00725 · Nota de Segurança
• https://twitter.com/CVEnew/status/2011181502311415920 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-21274 · Aviso do Fabricante