CVE-2026-21272

CVE-2026-21272 is an Improper Input Validation vulnerability affecting Adobe Dreamweaver Desktop versions 21.6 and earlier across Windows and macOS. This flaw allows an attacker to achieve arbitrary file system write, potentially leading to manipulation or injection of malicious data into system files. It carries a high CVSS score of 8.6, indicating a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability, though user interaction (opening a malicious file) is required for exploitation. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered notable community discussion, suggesting awareness and potential for future exploit development.