CVE-2026-44279

An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow attacker to disclose information via an exported Content Provider URI.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:fortinet:fortitoken_mobile:5.2.0:*:*:*:*:android:*:*
cpe:2.3:a:fortinet:fortitoken_mobile:5.2.1:*:*:*:*:android:*:*
cpe:2.3:a:fortinet:fortitoken_mobile:5.2.2:*:*:*:*:android:*:*
cpe:2.3:a:fortinet:fortitoken_mobile:6.1.0:*:*:*:*:android:*:*
cpe:2.3:a:fortinet:fortitoken_mobile:6.2.0:*:*:*:*:android:*:*

History

26 Jun 2026, 09:16

Type Values Removed Values Added
Summary (en) A improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow attacker to improper access control via <insert attack vector here> (en) An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow attacker to disclose information via an exported Content Provider URI.

16 May 2026, 01:57

Type Values Removed Values Added
CPE cpe:2.3:a:fortinet:fortitoken_mobile:5.2.0:*:*:*:*:android:*:*
cpe:2.3:a:fortinet:fortitoken_mobile:5.2.1:*:*:*:*:android:*:*
cpe:2.3:a:fortinet:fortitoken_mobile:6.2.0:*:*:*:*:android:*:*
cpe:2.3:a:fortinet:fortitoken_mobile:5.2.2:*:*:*:*:android:*:*
cpe:2.3:a:fortinet:fortitoken_mobile:6.1.0:*:*:*:*:android:*:*
First Time Fortinet fortitoken Mobile
Fortinet
References () https://fortiguard.fortinet.com/psirt/FG-IR-26-130 - () https://fortiguard.fortinet.com/psirt/FG-IR-26-130 - Vendor Advisory

12 May 2026, 18:17

Type Values Removed Values Added
New CVE

Information

Published : 2026-05-12 18:17

Updated : 2026-06-26 09:16


NVD link : CVE-2026-44279

Mitre link : CVE-2026-44279

CVE.ORG link : CVE-2026-44279


JSON object : View

Products Affected

fortinet

  • fortitoken_mobile
CWE
CWE-926

Improper Export of Android Application Components