CVE-2026-47910 is an Incorrect Authorization vulnerability in Adobe Dreamweaver Desktop (versions 21.7 and earlier) that permits an attacker to read arbitrary files on the file system beyond the intended access boundaries. The attack vector requires local access with user interaction (opening a malicious file). The vulnerability changes the security scope and impacts confidentiality (high impact) but does not affect integrity or availability. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

Successful exploitation allows an attacker to access sensitive files and directories outside the authorized scope, compromising confidentiality. There is no impact on integrity or availability. The attack requires user interaction, limiting the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources to avoid triggering the vulnerability.