CVE-2026-21272: Dreamweaver Desktop | Improper Input Validation (CWE-20)
Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could leverage this vulnerability to manipulate or inject malicious data into files on the system. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is changed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dreamweaver Desktopto a version that resolves this vulnerability.Fixed in 21.6 and earlier - Compensating control
User interaction is required (victim must open a malicious file). Protect users by warning against opening untrusted/malicious files and controlling access to files from untrusted sources.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21272?
CVE-2026-21272 is classified as a high severity vulnerability due to its potential for arbitrary file system write.
How do I fix CVE-2026-21272?
To fix CVE-2026-21272, update Adobe Dreamweaver Desktop to version 21.7 or later.
What versions of Dreamweaver Desktop are affected by CVE-2026-21272?
Adobe Dreamweaver Desktop versions 21.6 and earlier are affected by CVE-2026-21272.
What type of vulnerability is CVE-2026-21272?
CVE-2026-21272 is categorized as an Improper Input Validation vulnerability.
What could an attacker achieve by exploiting CVE-2026-21272?
An attacker could leverage CVE-2026-21272 to manipulate or inject malicious data into the file system.