CVE-2026-21267: Dreamweaver Desktop | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is changed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21267?
The severity of CVE-2026-21267 is classified as high due to its potential for OS command injection.
How do I fix CVE-2026-21267?
To fix CVE-2026-21267, update Adobe Dreamweaver Desktop to version 21.6.1 or later.
What versions of Dreamweaver Desktop are affected by CVE-2026-21267?
Adobe Dreamweaver Desktop versions 21.6 and earlier are affected by CVE-2026-21267.
What type of vulnerability is CVE-2026-21267?
CVE-2026-21267 is categorized as an OS Command Injection vulnerability.
Can CVE-2026-21267 lead to unauthorized access?
Yes, CVE-2026-21267 can potentially allow an attacker to execute arbitrary commands on the operating system.