PT-2026-44836 · Interinfo · Dreammaker

Kun Xian Lin · Publicado 2026-05-29 · Atualizado 2026-05-29 · CVE-2026-10072

Mitre

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

DreamMaker developed by Interinfo has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2026-10072

Produtos afetados

Dreammaker

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-10072 · Nota de Segurança
• https://twcert.org.tw/tw/cp-132-10943-8fb00-1.html · Nota
• https://twcert.org.tw/en/cp-139-10946-1127f-2.html · Nota