VDB

CVE-2026-21274

CVE-2026-21274 PUBLISHED CVSS 7.800000190734863 HIGH

Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could leverage this vulnerability to bypass security measures and execute unauthorized code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS 0.07% · 22.5th percentile

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.07%
22.5th percentile

Affected Products

VendorProductVersions
adobedreamweaver0, 0, 0
AdobeDreamweaver Desktop0, 0

Timeline

  • Jan 13, 2026 CVE Published
  • Jan 13, 2026 CVE Updated
  • Jan 14, 2026 EPSS Score
  • Jan 17, 2026 EPSS Score
  • Jan 20, 2026 EPSS Score
  • Jan 23, 2026 EPSS Score
  • Jan 26, 2026 EPSS Score
  • Jan 29, 2026 EPSS Score
  • Feb 1, 2026 EPSS Score
  • Feb 4, 2026 EPSS Score
  • Feb 7, 2026 EPSS Score
  • Feb 10, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›