The vulnerability identified as CVE-2026-88416 affects MCMS versions 6.1.1 through 6.2.1. It is a SQL injection vulnerability located in the custom model/form import feature. This type of vulnerability typically allows attackers to manipulate backend SQL queries by injecting crafted input, potentially leading to unauthorized data access or modification. However, no further technical details or exploitation methods are described in the provided data.

The impact of this vulnerability is the potential for unauthorized access or modification of the database through SQL injection. Specific consequences such as data leakage, data corruption, or privilege escalation are not detailed in the available information. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or mitigation is available, avoid using the custom model/form import feature or restrict access to it to trusted users only.