CyberSecBulletin

Metinfo vulnerabilities

We track 2 vulnerabilities in Metinfo products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 1, 2026.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Metinfo vulnerabilities

  • 9.8 Critical severity

    MetInfo CMS: Improper Control of Generation of Code

    CVE-2026-29014MetInfo CMSEPSS 39.5%

    MetInfo CMS versions 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability that allows remote attackers to execute arbitrary code by sending crafted requests with malicious PHP code. Attackers can exploit insufficient input neutralizati

  • 7.5 High severity

    Metinfo: Improper Restriction of XML External Entity Reference

    CVE-2025-63551Metinfo

    A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Entity (XXE) injection, exists in MetInfo Content Management System (CMS) thru 8.1. This flaw stems from a defect in the XML parsing logic, which allows an attacker to const