Skip to content
OpenAdvisories

Vendor

mwtcmi

5 known vulnerabilities.

Products

frogman 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-46513

    Frogman: API tokens stored in plaintext

    Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by Tools/CreateApiToken.php:33-36 as raw bin2hex(random_bytes(32)) strings in oc_api_tokens, and Frogman.class.php:78 authenticated the X-Frogm…

    mwtcmi frogman