Vulnerabilitycritical
MetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution Attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-29014 | Unauthenticated PHP Code Injection RCE in MetInfo CMS | 9.3 | 39% | PoC ×2 |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan May 05, 2026 Vulnerability / Network Security Threat actors are actively exploiting a critical security flaw impacting an open-source content management system (CMS) known as MetInfo, according to new findings from VulnCheck. The vulnerability in question is CVE-2026-29014 (CVSS score: 9. 8), a code injection flaw that could result in arbitrary code execution.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.