CVE-2026-10074EPSS p26.0%

CVE-2026-10074CVE-2026-10074

Description

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system files.

Scoring

CVSS 4.9 ()
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS0.35% probability of exploitation · percentile 26.0% · 2026-10-05T12:00:23Z
Last modified2026-07-21
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.