DreamMaker vulnerabilities

2 known vulnerabilities in DreamMaker from Internet Information. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  DreamMaker: Unrestricted Upload of File with Dangerous Type

  CVE-2026-24729Jan 30, 2026Internet Information

  An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file.

• 9.3 Critical severity

  DreamMaker: Missing Authentication for Critical Functionality

  CVE-2026-24728Jan 30, 2026Internet Information

  A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication.