CVE-2026-29014
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Apr 01, 2026
Vendor
unknown
Description
MetInfo CMS versions 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability that allows remote attackers to execute arbitrary code by sending crafted requests with malicious PHP code. Attackers can exploit insufficient input neutralization in the execution path to achieve remote code execution and gain full control over the affected server.