VDB
CVE-2026-21267
CVE-2026-21267
PUBLISHED
CVSS 8.600000381469727 HIGH
Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is changed.
EPSS 0.05% · 14.6th percentile
Risk Scores
CVSS 3.1
8.600000381469727
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS Score
0.05%
14.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| adobe | dreamweaver | 0, 0, 0 |
| Adobe | Dreamweaver Desktop | 0, 0 |
Timeline
- Jan 13, 2026 CVE Published
- Jan 14, 2026 EPSS Score
- Jan 14, 2026 PoC Published
- Jan 14, 2026 PoC Published
- Jan 14, 2026 CVE Updated
- Jan 17, 2026 EPSS Score
- Jan 20, 2026 EPSS Score
- Jan 23, 2026 EPSS Score
- Jan 26, 2026 EPSS Score
- Jan 29, 2026 EPSS Score
- Feb 1, 2026 EPSS Score
- Feb 4, 2026 EPSS Score