VULNERABILITY INTELLIGENCE
CVE-2026-24729
EPSS probability0.37%
CISA KEVNot currently listed
Published2026-01-30
Last modified2026-06-17
Description
An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file.
Weakness classification
- ART@zuso.ai: CWE-434