PT-2026-2769 · Adobe · Dreamweaver Desktop

Jann Horn + 1 · Published 2026-01-13 · Updated 2026-01-13 · CVE-2026-21271

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.6 and earlier

Description Dreamweaver Desktop versions 21.6 and earlier are susceptible to an Improper Input Validation issue. Successful exploitation of this issue could lead to arbitrary code execution within the context of the current user. User interaction is required, specifically a victim must open a malicious file, for exploitation to occur.

Recommendations Update Dreamweaver Desktop to a version later than 21.6.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-00726

CVE-2026-21271

Affected Products

Dreamweaver Desktop

References · 7

• https://osv.dev/vulnerability/CVE-2026-21271 · Vendor Advisory
• https://helpx.adobe.com/security/products/dreamweaver/apsb26-01.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00726 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-21271 · Security Note
• https://twitter.com/CVEnew/status/2011181501401219158 · Twitter Post
• https://twitter.com/CveFindCom/status/2011161147001483609 · Twitter Post
• https://twitter.com/TheHackerWire/status/2011167804993532129 · Twitter Post