CVE-2026-46514

Name of the Vulnerable Software and Affected Versions Frogman versions prior to 1.6.2

Description Frogman provides headless PBX control through MCP and HTTP API. The fm reset password() function in Tools/ResetPassword.php and the fm add extension() function in Tools/AddExtension.php return plaintext passwords and secrets, respectively. These responses are JSON-encoded into the oc audit log.detail field via the auditOutcome variable in Frogman.class.php. Consequently, any caller with PERM READ permissions and access to the fm audit search endpoint can recover these stored credentials.

Recommendations Update to version 1.6.2.