CVE-2026-44279
An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroi…
Published May 12, 2026 · updated Jun 26, 2026 · fortinet fortitoken mobile
An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow attacker to disclose information via an exported Content Provider URI.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 12, 2026 · NIST NVD
Detected
An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow attacker to disclose information via an exported Content Provider URI.
Jun 26, 2026 · NIST NVD
Updated
An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow attacker to disclose information via an exported Content Provider URI.
Affected
- cpe fortinet/fortitoken mobile5.2.0
- cpe fortinet/fortitoken mobile5.2.1
- cpe fortinet/fortitoken mobile5.2.2
- cpe fortinet/fortitoken mobile6.1.0
- cpe fortinet/fortitoken mobile6.2.0
Sources
- CVE.orgVulnerability recordCVE-2026-44279
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-44279
An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow attacker to disclose information via an exported Content Provider URI.
nvd.nist.gov