Arbitrary file upload in Internet Information Co., Ltd Dreammaker

CVE-2026-24729

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file.

Vulnerability class: Unrestricted File Upload

EPSS: 0.003 (26.2th percentile) — read the EPSS interpretation.