Internet Information Co., Ltd vulnerabilities
Published CVEs affecting Internet Information Co., Ltd products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-24729
Critical · 10.0
CWE-434 Jan 30, 2026
Interinfo DreamMaker Unrestricted File Upload Vulnerability
An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file.
CVE-2026-24728
Critical · 9.3
CWE-306 Jan 30, 2026
Interinfo DreamMaker - Missing Authentication on Administrative Endpoint
A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication.