MetInfo CMS CVE-2026-29014 Exploited in the Wild for Remote Code Execution

A critical unauthenticated PHP code injection flaw in MetInfo CMS 7.9–8.1 (CVSS 9.8) is under active exploitation. Patch to the April 7 release immediately.