Tag #php 1 post tagged php. ← All topics cve MetInfo CMS CVE-2026-29014 Exploited in the Wild for Remote Code Execution A critical unauthenticated PHP code injection flaw in MetInfo CMS 7.9–8.1 (CVSS 9.8) is under active exploitation. Patch to the April 7 release immediately. May 5, 2026