Description
MetInfo CMS 7.9、8.0 和 8.1 版本包含未认证的 PHP 代码注入漏洞，允许远程攻击者通过发送带有恶意 PHP 代码的定制请求来执行任意代码
MetInfo CMS CVE-2026-29014 PHP代码执行
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2026-29014
https://thehackernews.com/2026/05/metinfo-cms-cve-2026-29014-exploited.html
https://avd.aliyun.com/detail?id=AVD-2026-29014
https://websec.net/blog/cve-2026-29014-metinfo-cms-unauthenticated-php-code-injection-69cdc290c14a8a99e1f91b7a
https://ddpoc.com/DVB-2026-11062.html
https://cve.imfht.com/intel/573256
https://www.vulncheck.com/advisories/metinfo-cms-unauthenticated-php-code-injection-rce
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-29014.yaml
https://www.metinfo.cn/news/2875.html
https://cvedetails.com/cve/CVE-2026-29014/