PT-2026-61601 · Frogman · Frogman

CVE-2026-46516 · Published 2026-07-20 · Updated 2026-07-20

Positive Technologies (AI Summary)

CVSS v4.0

4.8

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions Frogman versions prior to 1.6.6

Description The chat-console markdown formatter in the formatMarkdown() function within assets/js/chat.js incorrectly inserts regex capture groups as raw HTML for inline code, bold, markdown links, and download links. This allows an attacker to inject HTML or JavaScript payloads through user-controlled fields such as extension names, ring-group descriptions, IVR names, and queue descriptions. When another administrator views these responses via the Frogman chat, the payload executes within the viewer's session using their specific permissions.

Recommendations Update to version 1.6.6.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-46516

GHSA-7QVV-VGW9-RCXG

Affected Products

Frogman

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46516.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-46516 · Security Note
• https://osv.dev/vulnerability/CVE-2026-46516 · Vendor Advisory
• https://github.com/mwtcmi/frogman/commit/f0d2ba1785abb31b7d5debeae526f9e36962b55e · Note
• https://github.com/mwtcmi/frogman/security/advisories/GHSA-7qvv-vgw9-rcxg · Note
• https://twitter.com/CVEnew/status/2079238946907730109 · Twitter Post
• https://twitter.com/infoflowcloud/status/2079240365307994604 · Twitter Post