CVEvulnerability
CVE-2026-44279
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2026-05-12
- Last modified
- 2026-10-26
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-926
Description
An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow attacker to disclose information via an exported Content Provider URI.
Affected configurations
• fortinet fortitoken mobile 5.2.0
• fortinet fortitoken mobile 5.2.1
• fortinet fortitoken mobile 5.2.2
• fortinet fortitoken mobile 6.1.0
• fortinet fortitoken mobile 6.2.0
Related
Weakness · CWE (1)
- CWE-926 Improper Export of Android Application Components weakness
References
- https://fortiguard.fortinet.com/psirt/FG-IR-26-130 Vendor Advisory