PT-2026-44838 · Interinfo · Dreammaker

Kun Xian Lin · Published 2026-05-29 · Updated 2026-05-29 · CVE-2026-10074

NVD

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system files.

Fix

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2026-10074

Affected Products

Dreammaker

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-10074 · Security Note
• https://twcert.org.tw/tw/cp-132-10943-8fb00-1.html · Note
• https://twcert.org.tw/en/cp-139-10946-1127f-2.html · Note