CVE-2026-21268: Dreamweaver Desktop | Improper Input Validation (CWE-20)
Published Jan 13, 2026
·Updated
Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is changed.
Affected Software
4 affected components
Adobe Dreamweaver Desktop<21.6
All of the following
Adobe Dreamweaver<21.7
Any of the following
Apple macOS
Microsoft Windows
Event History
Jan 13, 2026
CVE Published
via MITRE·06:25 PM
Data Sourced
via MITRE·06:25 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:16 PM
DescriptionSeverityWeaknessAffected Software
Jan 6, 58022
Event
via FIRST·06:19 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-21268?
CVE-2026-21268 has a critical severity rating due to its potential for arbitrary code execution.
2
How do I fix CVE-2026-21268?
To mitigate CVE-2026-21268, users should update to the latest version of Adobe Dreamweaver Desktop beyond version 21.6.
3
What versions of Dreamweaver Desktop are affected by CVE-2026-21268?
CVE-2026-21268 affects Adobe Dreamweaver Desktop versions 21.6 and earlier.
4
What kind of security issue is CVE-2026-21268?
CVE-2026-21268 is classified as an Improper Input Validation vulnerability.
5
Is user interaction required to exploit CVE-2026-21268?
Yes, exploitation of CVE-2026-21268 requires user interaction.