CVE-2026-10072: Interinfo｜DreamMaker - Arbitrary File Upload

Synopsis

Arbitrary file upload in Interinfo DreamMaker lets an authenticated remote attacker upload a web shell and execute arbitrary code on the server. The bug is reachable over the network and requires high-privilege credentials, with no victim interaction needed; successful exploitation yields full read, write, and disruption of the affected service. No upstream fix has been published, and HarborGuard tracks the advisory for patch availability.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the DreamMaker upload endpoint over the network (AV:N).

• AuthenticationRequired

  A high-privilege administrative account is needed to invoke the vulnerable upload path (PR:H).

• Victim interactionNot required

  No user action is required; the attacker drives the upload directly (UI:N).

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable once credentials are obtained (AC:L).

Blast Radius

• Writes attacker-controlled files into the application directory and executes them as a web shell.
• Reads any data the DreamMaker service can access, including application config and stored records.
• Modifies or deletes server-side files and persisted data through the resulting code execution.
• Disrupts or fully takes over the affected service host, since the shell runs in the application's process context.