Mwtcmi

5 CVEs across 1 Mwtcmi products. Browse Mwtcmi vulnerabilities, severities, and proof-of-concept exploits.

Mwtcmi products with known CVEs

ProductCVEs
Frogman5
Mwtcmi CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-465162026-07-20Frogman provides headless FreePBX control. Prior to version 1.6.6, Frogman's chat-console markdown formatter (`assets/js/chat.js`'s `formatMarkdown`) inserted…
CVE-2026-465152026-07-16Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.3, PERM_READ access was sufficient to call fm_list_managers, fm_list_pinsets, fm_s…
CVE-2026-46514Medium6.52026-07-16Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_reset_password in Tools/ResetPassword.php:48-53 returned a plaintext passwor…
CVE-2026-46513High7.42026-07-16Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by Tools/CreateApiToken.php:33-36 as raw bi…
CVE-2026-46512Critical9.92026-07-16Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_dialplan_apply accepted template parameters including greeting, dest, url, e…