PT-2026-44837 · Interinfo · Dreammaker

Kun Xian Lin · Published 2026-05-29 · Updated 2026-05-29 · CVE-2026-10073

Mitre

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to exploit Relative Path Traversal to download arbitrary system files.

Fix

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2026-10073

Affected Products

Dreammaker

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-10073 · Security Note
• https://twcert.org.tw/tw/cp-132-10943-8fb00-1.html · Note
• https://twcert.org.tw/en/cp-139-10946-1127f-2.html · Note