CVE-2026-29014 2

Vulnerability (CVE)

Met Info CMS CVE-2026-29014 Exploited for Remote Code Execution Attacks

VulnCheck reports active exploitation of CVE-2026-29014, a CVSS 9.8 unauthenticated PHP code injection flaw in MetInfo CMS versions 7.9, 8.0, and 8.1 that allows remote attackers to execute arbitrary code and gain full control of the server. Patches were...

Vulnerabilities & Patching

⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, Web Socket Skimmers and More

Cyber Risks The Hacker News

Attackers have weaponized CVE-2026-6973, an improper input validation flaw in Ivanti Endpoint Manager Mobile (EPMM) that lets authenticated users with administrative privileges run code remotely, and are actively exploiting a zero-day memory corruption...

Vulnerabilities & Patching