CVE-2026-21271CWE-20

CVE-2026-21271

High · published January 14, 2026

CVSS v3.1
8.6
EPSS
0%
Percentile
16.1
In the wild
Unconfirmed
What it is

⚡ A simple click could unleash chaos! Users of Dreamweaver Desktop versions 21.6 and earlier are at risk from an input validation flaw that opens the door for arbitrary code execution. 🔥 Think of it like a restaurant where a chef is always ready to prepare meals based on a suspiciously vague order — if the chef doesn’t double-check the ingredients, they could end up cooking something risky and unexpected! If an attacker tricks a user into opening a malicious file, they could execute harmful code with the same permissions as the user. This could lead to data breaches, unauthorized access, or even system takeover, making it a serious concern for anyone using vulnerable versions.

Put simply

Think of it like a restaurant where a chef is always ready to prepare meals based on a suspiciously vague order — if the chef doesn’t double-check the ingredients, they could end up cooking something risky and unexpected! The vulnerability arises from improper input validation, allowing malicious files to execute arbitrary code when opened by the user, ultimately compromising the application's security.

What to do

If an attacker tricks a user into opening a malicious file, they could execute harmful code with the same permissions as the user. This could lead to data breaches, unauthorized access, or even system takeover, making it a serious concern for anyone using vulnerable versions. To protect your system, upgrade Dreamweaver Desktop to version 21.7 or later immediately. Educate users about the risks of opening unknown files and consider implementing file validation checks where possible. You've got this! With these steps, you’ll keep your system secure and your coding environment safe! 🛡️

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00255 · 16.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-01-14T00:16Z
Affected products (1)
ProductVersionsFixed in
adobe/dreamweaver< 21.721.7
References (1)
EPSS history
Timeline
  • 13 JAN 18:25Z
    Dreamweaver Desktop | Improper Input Validation (CWE-20)
    cvelistv5