Vulnerabilities

TI-2026-34205 CVE-2026-46516

Frogman vulnerable to stored XSS in chat console formatter (escalation vector in multi-admin deployments)

LOW 22

Frogman provides headless FreePBX control.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00441 Published 2026-07-20 Fixed in 1.6.6 CWE-79

TI-2026-34204 CVE-2026-46515

MEDIUM 43

Frogman provides headless PBX control through MCP and HTTP API.

CVSS 4.0CRITICAL 9.3 Network Low privileges No interaction EPSS 0.00568 Published 2026-07-16 Fixed in 1.6.3 CWE-862

TI-2026-34201 CVE-2026-46512

MEDIUM 44

Frogman provides headless PBX control through MCP and HTTP API.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0065 Published 2026-07-16 Fixed in 1.6.2 CWE-94

TI-2026-34202 CVE-2026-46513

LOW 35

Frogman provides headless PBX control through MCP and HTTP API.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00433 Published 2026-07-16 Fixed in 1.6.2 CWE-256

TI-2026-34203 CVE-2026-46514

LOW 29

Frogman provides headless PBX control through MCP and HTTP API.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00452 Published 2026-07-16 Fixed in 1.6.2 CWE-532