Threat actors are actively exploiting a critical security flaw impacting an open-source content management system (CMS) known as MetInfo, according to new findings from VulnCheck. The vulnerability in question is CVE-2026-29014 (CVSS score: 9.8), a code injection flaw that could result in arbitrary code execution. "MetInfo CMS versions 7.9, 8.0, and 8.1 contain an unauthenticated PHP code

Send this story to anyone — or drop the embed into a blog post, Substack, Notion page. Every play sends rev-share back to The Hacker News.

𝕏 Post on X in Share on LinkedIn ✉ Email a friend

Heard via Storyflo

Get audio versions of every article you read.

Pick what matters — your audio curator gets you into your daily flo.

Join the listener waitlist

MetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution Attacks · Storyflo