PT-2026-5378 · Interinfo · Interinfo Dreammaker

Kuang Ming Chang · Published 2026-01-30 · Updated 2026-01-30 · CVE-2026-24729

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Interinfo DreamMaker versions prior to 2025/10/22

Description A flaw exists in the file upload functionality of Interinfo DreamMaker that permits unrestricted file uploads of dangerous file types. This can allow remote attackers to execute arbitrary system commands by uploading a malicious class file.

Recommendations Update Interinfo DreamMaker to version 2025/10/22 or later.

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-24729

Affected Products

Interinfo Dreammaker

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-24729 · Security Note
• https://twitter.com/VulmonFeeds/status/2017134491177762821 · Twitter Post
• https://t.me/CVEtracker/43267 · Telegram Post
• https://zuso.ai/advisory/za-2026-02 · Note