CVE-2026-29014
Last modified
CVE-2026-29014 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. MetInfo CMS versions 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability that allows remote attackers to execute arbitrary code by sending crafted requests with malicious PHP code. Attackers can exploit insufficient input neutralization in the execution path to achieve remote code execution and gain full control over the affected server.. EPSS estimates a 39.69% chance of exploitation in the next 30 days.
Description
MetInfo CMS versions 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability that allows remote attackers to execute arbitrary code by sending crafted requests with malicious PHP code. Attackers can exploit insufficient input neutralization in the execution path to achieve remote code execution and gain full control over the affected server.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Metinfo | Metinfo | 7.9 |
| Metinfo | Metinfo | 8.0.0 |
| Metinfo | Metinfo | 8.1 |
References
- https://karmainsecurity.com/KIS-2026-06Exploit, Third Party Advisory
- https://www.metinfo.cn/Product
- https://www.vulncheck.com/advisories/metinfo-cms-unauthenticated-php-code-injection-rceThird Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2026/Apr/1Mailing List, Third Party Advisory
- https://websec.net/blog/cve-2026-29014-metinfo-cms-unauthenticated-php-code-injection-69cdc290c14a8a99e1f91b7aExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-29014?
How severe is CVE-2026-29014?
How do I fix CVE-2026-29014?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-29008U-Boot through 2026.04-rc3 contains an integer underflow vul…8.7
- CVE-2026-29009U-Boot before 2026.07-rc2 contains a buffer overflow vulnera…9.8
- CVE-2026-29010Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-29011Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-29012Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-29013libcoap contains out-of-bounds read vulnerabilities in OSCOR…9.8
- CVE-2026-2902The WP Meteor Website Speed Optimization Addon plugin for Wo…6.1
- CVE-2026-29022dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit…7.8
- CVE-2026-29023Keygraph Shannon contains a hard-coded API key in its router…7.3
- CVE-2026-29024Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-29025Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-29026Rejected reason: This CVE ID has been rejected or withdrawn …
Are you affected by CVE-2026-29014?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST