mwtcmi frogman

• CVE-2026-46516 Medium 4.8 Frogman vulnerable to stored XSS in chat console formatter (escalation vector in multi-admin deployments) 0.4%
• CVE-2026-46515 Critical 9.3 Frogman: Multiple read-tier tools expose admin-grade data and arbitrary GraphQL execution 0.6%
• CVE-2026-46512 Critical 9.9 Frogman: Dialplan template parameters interpolated into extensions_custom.conf without escaping 0.7%
• CVE-2026-46513 High 7.4 Frogman: API tokens stored in plaintext 0.4%
• CVE-2026-46514 Medium 6.5 Frogman: Plaintext passwords and secrets persisted to audit log 0.5%