Threats Tagged 'cve-2026-24729'
View all threats tagged with 'cve-2026-24729'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-24729'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-24729 is a critical vulnerability in Internet Information Co. , Ltd's DreamMaker product prior to version 2025/10/22. It involves an unrestricted file upload flaw (CWE-434) that allows remote attackers to upload malicious class files without restriction. Exploiting this vulnerability enables attackers to execute arbitrary system commands remotely, without requiring authentication or user interaction. The vulnerability has a CVSS 4.0 base score of 10.0, indicating maximum severity with network attack vector, no privileges or user interaction needed, and high impact on confidentiality, integrity, and availability. Although no known exploits are currently reported in the wild, the risk is severe due to the ease of exploitation and potential for full system compromise. European organizations using DreamMaker are at significant risk, especially those in critical infrastructure or sectors relying on this software. Immediate patching or mitigation is essential to prevent exploitation. Join the discussion | CVE Database V5 | 01/30/2026, 03:50:31 UTC Added: 01/30/2026, 04:27:57 UTC |
Showing 1 to 1 of 1 result