PT-2026-2770 · Adobe · Dreamweaver Desktop

Jann Horn · Published 2026-01-13 · Updated 2026-01-13 · CVE-2026-21272

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.6 and earlier

Description Dreamweaver Desktop versions 21.6 and earlier are susceptible to an Improper Input Validation issue. This could allow an attacker to manipulate or inject malicious data into files on the system, leading to arbitrary file system write. Exploitation requires user interaction, specifically a victim opening a malicious file. The scope of the issue is changed during exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-00727

CVE-2026-21272

Affected Products

Dreamweaver Desktop

References · 6

• https://osv.dev/vulnerability/CVE-2026-21272 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21272 · Security Note
• https://helpx.adobe.com/security/products/dreamweaver/apsb26-01.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00727 · Security Note
• https://twitter.com/CVEnew/status/2011181503334740466 · Twitter Post
• https://twitter.com/CveFindCom/status/2011161121428808064 · Twitter Post