← Back to CVE search

CVE-2026-10072

DreamMaker

Description

DreamMaker developed by Interinfo has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

CVSS 7.2EPSS 0.45599999999999996%Risk 0.75
View source
Published
2026-05-29 14:16:25
Affected versions
unknown
Type
Core software
Last modified
2026-07-21 12:10:00
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H