High severity8.6NVD Advisory· Published Jan 13, 2026· Updated Jun 17, 2026
CVE-2026-21267
CVE-2026-21267
Description
Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is changed.
Affected products
3cpe:2.3:a:adobe:dreamweaver:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:adobe:dreamweaver:*:*:*:*:*:*:*:*range: <21.7
- (no CPE)range: 0
- Range: <=21.6
Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/dreamweaver/apsb26-01.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.