DreamMaker vulnerabilities
5 known CVE vulnerabilities in DreamMaker, translated and rated.
- CVE-2026-10071Critical
DreamMaker by Interinfo has an arbitrary file upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, leading to arbitrary code execution on the server.
- CVE-2026-10075Medium
In DreamMaker by Interinfo, a Path Traversal vulnerability allows unauthenticated remote attackers to read file names under arbitrary paths via Absolute Path Traversal.
- CVE-2026-10074Medium
DreamMaker by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system files.
- CVE-2026-10073High
A vulnerability in DreamMaker by Interinfo allows unauthenticated local attackers to read arbitrary system files via Relative Path Traversal.
- CVE-2026-10072High
DreamMaker by Interinfo has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, leading to arbitrary code execution on the server.

