CVE-2026-47906
High · 8.6CVSS
8.6
EPSS
0.3%
Published
Jun 9, 2026
CISA due date
—
The record
Dreamweaver Desktop versions 21.7 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|