CVE-2026-44279
Medium · 5.5CVSS
5.5
EPSS
0.1%
Published
May 12, 2026
CISA due date
—
The record
An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow attacker to disclose information via an exported Content Provider URI.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-18994 A potential improper authorization vulnerability was reported in the Lenovo File Manager… CWE-926
- CVE-2026-21081 Improper export of android application components in SamsungPassAutofill prior to version… CWE-926
- CVE-2026-21063 Improper export of android application components in AppLock prior to SMR Aug-2026… CWE-926
- CVE-2026-21059 Improper export of android application components in Samsung Contacts prior to SMR… CWE-926
- CVE-2026-47363 In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher… CWE-926
- CVE-2026-47361 In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is… CWE-926
- CVE-2026-44965 In versions of the Datadog Android application prior to v545-5.9.2, six App Widget… CWE-926
- CVE-2026-20470 In Telephony, there is a possible information disclosure due to a missing permission… CWE-926