CVE-2026-47909: Dreamweaver Desktop | Improper Input Validation (CWE-20)
Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47909?
The severity of CVE-2026-47909 is rated medium with a score of 6.3.
How do I fix CVE-2026-47909?
To address CVE-2026-47909, users should update to the latest version of Adobe Dreamweaver that is not affected by this vulnerability.
What type of vulnerability is CVE-2026-47909?
CVE-2026-47909 is classified as an Improper Input Validation vulnerability.
What could be the impact of exploiting CVE-2026-47909?
Exploitation of CVE-2026-47909 could allow attackers to read arbitrary files and directories on the file system.
Which versions of Dreamweaver are affected by CVE-2026-47909?
Dreamweaver Desktop versions 21.7 and earlier are affected by CVE-2026-47909.