CVE-2026-88416

MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature.

  • Published Sep 22, 2026
  • Not yet scored
  • 0.2% chance of exploitation in the next 30 days (EPSS)

CVE-2026-88416 at the National Vulnerability Database