CVE-2026-88416

CVSS 9.8 (critical) · published 2026-09-22

MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature.

Weakness: CWE-89

Source: NVD CVE-2026-88416

References

• https://github.com/15536818056/CVE/issues/3
• https://github.com/15536818056/CVE/issues/3

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.