PT-2026-44838 · Interinfo · Dreammaker

Kun Xian Lin · Publicado 2026-05-29 · Atualizado 2026-05-29 · CVE-2026-10074

NVD

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system files.

Correção

Relative Path Traversal

Enumeração de Fraquezas

CWE-23

Identificadores relacionados

CVE-2026-10074

Produtos afetados

Dreammaker

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-10074 · Nota de Segurança
• https://twcert.org.tw/tw/cp-132-10943-8fb00-1.html · Nota
• https://twcert.org.tw/en/cp-139-10946-1127f-2.html · Nota