CVE-2026-10074: Interinfo｜DreamMaker - Arbitrary File Read
Published May 29, 2026
·Updated
DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system files.
Affected Software
1 affected component
Interinfo DreamMaker
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
DreamMaker (Interinfo)to a version that resolves this vulnerability.Fixed in Java Composer 2.3 or later
Event History
May 29, 2026
CVE Published
via MITRE·12:45 PM
Data Sourced
via MITRE·12:45 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeakness
Feb 18, 58378
Event
via NVD·05:12 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-10074?
The severity of CVE-2026-10074 is medium with a score of 6.9.
2
What type of vulnerability is CVE-2026-10074?
CVE-2026-10074 is classified as an Arbitrary File Read vulnerability due to a Path Traversal issue.
3
How do I fix CVE-2026-10074?
To fix CVE-2026-10074, update to version Java Composer 2.3 or later.
4
Who is affected by CVE-2026-10074?
CVE-2026-10074 affects users of Interinfo DreamMaker who have local privileges.
5
What can attackers do with CVE-2026-10074?
Attackers can exploit CVE-2026-10074 to read arbitrary system files on the infected system.