CVE-2026-47907 is an Improper Access Control vulnerability in Adobe Dreamweaver Desktop versions 21.7 and earlier. This flaw could enable an attacker to execute arbitrary code in the context of the current user if the victim opens a crafted malicious file. The vulnerability changes the security scope and impacts confidentiality, integrity, and availability. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

Successful exploitation allows arbitrary code execution with the current user's privileges, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. Because user interaction is required, the attack vector is limited to scenarios where a user opens a malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening untrusted files with Dreamweaver Desktop versions 21.7 and earlier.