PT-2026-44837 · Interinfo · Dreammaker

Kun Xian Lin · Publicado 2026-05-29 · Atualizado 2026-05-29 · CVE-2026-10073

Mitre

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to exploit Relative Path Traversal to download arbitrary system files.

Correção

Relative Path Traversal

Enumeração de Fraquezas

CWE-23

Identificadores relacionados

CVE-2026-10073

Produtos afetados

Dreammaker

Referências · 3

• https://twcert.org.tw/tw/cp-132-10943-8fb00-1.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-10073 · Nota de Segurança
• https://twcert.org.tw/en/cp-139-10946-1127f-2.html · Nota