← Retour à la recherche de CVE

CVE-2026-10072

DreamMaker

Description

DreamMaker developed by Interinfo has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

CVSS 7.2EPSS 0.45599999999999996%Risque 0.75
Voir la source
Publication
2026-05-29 14:16:25
Versions concernées
unknown
Type
Core software
Dernière modification
2026-07-21 12:10:00
Vecteur
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H