CVE-2026-88414

MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do).

• Published Sep 22, 2026
• CVSS 9.8 critical
• 0.4% chance of exploitation in the next 30 days (EPSS)

CVE-2026-88414 at the National Vulnerability Database