VYPR
← All advisories
Critical severityNVD Advisory· Published Jan 30, 2026· Updated Apr 15, 2026

CVE-2026-24728

CVE-2026-24728

Description

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.