Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-24729

Interinfo DreamMaker - Unrestricted Upload of File with Dangerous Type

Description

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Internet Information Co., Ltd DreamMaker

Default version status: unknown

  • 0 to < 2025/10/22affected

References